CHAPTER 3: Configuration Mode Commands
58
WatchGuard Vclass 5.1
destination address groups to which this policy
will be applied.
<interface [0|1|2|3]>
This argument records the interface this policy will
apply to.
[-position <num>]
This argument records which numbered location
this policy occupies in the policy table.
[-firewall <pass | block | authenticate
| reject>]
This argument allows you to specify which firewall
option to apply.
[<-service|-tenant|-nat|-qos|-schedule\
|-ipsec[no][bi_directional]>]
These arguments allow you to combine various
preexisting actions in this one policy, including:
-service:
Enter the name of a service group
after this argument.
-tenant:
Enter the name of a tenant object after
this argument.
-nat:
Enter the name of a NAT action after this
argument.
-qos:
Enter the name of a QoS action after this
argument.
-schedule:
Enter the name of a schedule after
this argument.
-ipsec:
Enter the name of an IPSec action after
this argument.
[{-tosF | -tosR} <bbbbbb>]
This argument records the TOS marking direction
and marking bit. “bbbbbb” represents the six bit