summaryrefslogtreecommitdiff
path: root/docs/configuration/firewall/general.rst
diff options
context:
space:
mode:
authorDaniil Baturin <daniil@vyos.io>2022-12-23 13:53:15 +0000
committerGitHub <noreply@github.com>2022-12-23 13:53:15 +0000
commitc31756d33b4273cbe03787854e0371ed5179cc8a (patch)
tree85c43cc87d0cd0b4b314da164a366df71936e2dd /docs/configuration/firewall/general.rst
parentaade883e244075b3ac6678b64c9da7929e74192a (diff)
parent768cae5fab16adbcc74c9dff0e321381bc294029 (diff)
downloadvyos-documentation-c31756d33b4273cbe03787854e0371ed5179cc8a.tar.gz
vyos-documentation-c31756d33b4273cbe03787854e0371ed5179cc8a.zip
Merge pull request #909 from nicolas-fort/conn_mark
T4886: Add connection-mark information to firewall and policy docs.
Diffstat (limited to 'docs/configuration/firewall/general.rst')
-rw-r--r--docs/configuration/firewall/general.rst7
1 files changed, 7 insertions, 0 deletions
diff --git a/docs/configuration/firewall/general.rst b/docs/configuration/firewall/general.rst
index dc087018..f2e01e03 100644
--- a/docs/configuration/firewall/general.rst
+++ b/docs/configuration/firewall/general.rst
@@ -345,6 +345,13 @@ There are a lot of matching criteria against which the package can be tested.
Match criteria based on nat connection status.
+.. cfgcmd:: set firewall name <name> rule <1-999999> connection-mark
+ <1-2147483647>
+.. cfgcmd:: set firewall ipv6-name <name> rule <1-999999> connection-mark
+ <1-2147483647>
+
+ Match criteria based on connection mark.
+
.. cfgcmd:: set firewall name <name> rule <1-999999> source address
[address | addressrange | CIDR]
.. cfgcmd:: set firewall name <name> rule <1-999999> destination address