Allied Telesis AR2050V, Справочник по командам, Страница: 2650 / 2824

C613-50186-01 Rev B Command Reference for AR2050V 2650
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
A
PPLICATION AND
E
NTITY
C
OMMANDS
ZONE
zone
Overview Use this command to create a zone entity or configure an existing zone.
Zone is a high level abstraction for a logical grouping or segmentation of physical
networks. This is the highest level of partitioning that firewall policy can be applied
to. Zone establishes the security border of your networks. A zone defines a
boundary where traffic is subjected to policy restrictions as it crosses to another
region of your networks. The minimum zones normally implemented would be a
trusted zone for the private network behind the firewall and a untrusted zone for
the Internet. Other common zones are a Demilitarized Zone (DMZ) for publicly
visible web servers and a Virtual Private Network (VPN) zone for remote access
users or tunnels to other networks.
Use the no variant of this command to destroy a zone entity.
Syntax
zone < zone-name >
no zone < zone-name >
Mode Global Configuration
Usage This command allows you to enter the Zone Mode with the prompt
awplus(config- category)# . The Zone Mode enables you to create, configure and
delete network entities. For more information about network entity, see the
network (Entity) command.
A zone entity must have at least one network entity for it to result in functioning
rules using that zone entity. Fore more information about how to add network
entities, see the
network (Entity) command.
Note that if the zone entity is destroyed, the networks and hosts of this zone will
be destroyed as well.
Examples To create a zone named
private
, use the commands:
awplus# configure terminal
awplus(config)# zone private
awplus(config-zone)#
To destroy zone
private
and all its networks, subnets and hosts, use the
commands:
awplus# configure terminal
awplus(config)# no zone private
Parameter Description
< zone-name >
Zone name.
You can use all alphanumeric ASCII characters, and the dash (-) and
underscore (_) characters. The name can be 1 to 64 characters long.