51
2.5.9 Security Command
1. General Settings
Command
Parameter
Description
Gateway(config)# security
firewall
Enable Firewall function.
No Command
Gateway(config)# no
security firewall
Disable Firewall function.
Show Command
Gateway(config)# show
security firewall
Shows the current status of firewall.
2. Set up Packet Filter
Command
Parameter
Description
Gateway(config)# security
packet-filter
Enable the packet filter function. When it
is enabled, the Residential Gateway will
drop packets which meet predetermined
conditions of the rules in the following
commands.
Gateway(config)# security
packet-filter apply
Apply all the configured packet filter
settings made.
Gateway(config)# security
packet-filter application [1-
10]
[1-10]
Specify the entry number of application
packet filter. This allows you to edit the
table of application filter rules. The
Residential Gateway will drop packets
when it receives packets which match the
entries in the rule table.
Gateway(config-
application-No.)# active
Enable the specified application filter rule.
Gateway(config-
application-No.)#
applications [1-11]
[1-11]
Specify an application whose packets will
be denied by this filter rule.
Where:
1:FTP 2:SSH 3:Telnet 4:SMTP
5:DNS 6:HTTP 7:POP 8:NNTP
9:IMAP 10:SNMP 11:HTTPS
Gateway(config-
application-No.)# source-ip-
range [A.B.C.D] [1-254]
[A.B.C.D] [1-254]
Specify the source IP address range of
the packets which will be denied by this
rule.
Gateway(config)# security
packet-filter lan [1-10]
[1-10]
Specify the entry number of lan packet
filter. This allows you to edit the rule table
for the LAN filter. The LAN filter will block
packets which are received by the
Residential Gateway from the private
network and match the pre-determined
condition of any entry in the rule table.
Gateway(config-lan-No.)#
active
Enable this LAN rule.
