364
<Sysname> display firewall-statistics all
firewall default
Use
firewall
default
to specify the default firewall filtering action of the IPv4 firewall.
Syntax
Standalone mode:
firewall default
{
deny
|
permit
} {
all
|
slot
slot-number
}
IRF mode:
firewall
default
{
deny
|
permit
} {
all
|
chassis
chassis-number
slot
slot-number
}
Default
The default filtering action of the IPv4 firewall is permitting packets to pass (
permit
).
Views
System view
Default command level
2: System level
Parameters
deny
: Specifies the filtering action as denying packets to pass the firewall.
permit
: Specifies the filtering action as permitting packets to pass the firewall.
all
: Specifies all interface cards.
slot
slot-number
: Specifies the interface card in the specified slot. (In standalone mode.)
chassis
chassis-number
slot
slot-number
: Specifies an interface card in an IRF member device.
The
chassis-number
argument represents the IRF member ID of the device. The
slot-number
argument represents the slot number of the card. (In IRF mode.)
Examples
# Specify the default filtering action of the IPv4 firewall as denying packets to pass.
<Sysname> system-view
[Sysname] firewall default deny
firewall enable
Use
firewall
enable
to enable the IPv4 firewall function.
Use
undo
firewall
enable
to disable the IPv4 firewall function.
Syntax
Standalone mode:
firewall
enable
{
all
|
slot
slot-number
}
undo
firewall
enable
IRF mode:
firewall
enable
{
all
|
chassis
chassis-number
slot
slot-number
}
undo firewall enable
