ZyXEL Communications ZyWALL USG Series, Reference Manual

Page: 166 / 426

Chapter 25 Secure Policy
ZyWALL / USG (ZLD) CLI Reference Guide
166
secure-policy6 zone_object { zone_object |ZyWALL} append
Enters the IPv6 secure policy sub-command mode to
add a direction specific through-ZyWALL rule or to-
ZyWALL rule to the end of the global rule list. See
Table 86 on page 167 for the sub-commands.
secure-policy6 zone_object { zone_object |ZyWALL} delete
<1..5000>
Removes a direction specific IPv6 through-ZyWALL
rule or to-ZyWALL rule.
<1..5000>
: the index number in a direction specific
firewall rule list.
secure-policy6 zone_object { zone_object |ZyWALL} flush
Removes all direction specific IPv6 through-ZyWALL
rule or to-ZyWALL rules.
secure-policy6 zone_object { zone_object |ZyWALL} insert
rule_number
Enters the IPv6 secure policy sub-command mode to
add a direction specific through-ZyWALL rule or to-
ZyWALL rule before the specified rule number. See
Table 86 on page 167 for the sub-commands.
secure-policy6 zone_object { zone_object |ZyWALL} move
rule_number to rule_number
Moves a direction specific IPv6 through-ZyWALL rule
or to-ZyWALL rule to the number that you specified.
[no] secure-policy6 activate
Enables the IPv6 secure policy on the ZyWALL / USG.
The
no
command disables the IPv6 firewall.
secure-policy6 append
Enters the IPv6 secure policy sub-command mode to
add a global firewall rule to the end of the global rule
list. See
Table 86 on page 167 for the sub-commands.
secure-policy6 default-rule action {allow | deny |
reject} { no log | log [alert] }
Sets how the IPv6 secure policy handles packets that
do not match any other secure policy rule.
secure-policy6 delete rule_number
Removes a IPv6 secure policy rule.
secure-policy6 flush
Removes all IPv6 secure policy rules.
secure-policy6 insert rule_number
Enters the IPv6 secure policy sub-command mode to
add a secure policy rule before the specified rule
number. See
Table 86 on page 167 for the sub-
commands.
secure-policy6 move rule_number to rule_number
Moves a IPv6 secure policy rule to the number that
you specified.
show secure-policy6
Displays all IPv6 secure policy settings.
show secure-policy6 rule_number
Displays a IPv6 secure policy rule’s settings.
show secure-policy6 zone_object { zone_object |ZyWALL}
Displays all IPv6 secure policy rules settings for the
specified packet direction.
show secure-policy6 zone_object { zone_object |ZyWALL}
rule_number
Displays a specified IPv6 secure policy rule’s settings
for the specified packet direction.
show secure-policy6 status
Displays whether or not the IPv6 secure policy is
active, whether or not IPv6 asymmetrical route
topology is allowed, and the default IPv6 secure policy
rule’s configuration.
show secure-policy6 block_rules
Displays all the IPv6 secure policy rules that deny
access.
show secure-policy6 any ZyWALL
Shows all the IPv6 to-ZyWALL / USG secure policy
rules.
[no] secure-policy6 asymmetrical-route activate
Allows or disallows asymmetrical route topology for
IPv6 traffic.
session-status-update reply-time <5..300>
Set how many seconds the ZyWALL / USG will allow a
session to remain idle (without traffic) before closing
it.
Table 85
Command Summary: Secure Policy (continued)
COMMAND DESCRIPTION