diff options
| author | Nicolas Fort <nicolasfort1988@gmail.com> | 2024-05-09 15:27:20 -0300 |
|---|---|---|
| committer | Nicolas Fort <nicolasfort1988@gmail.com> | 2024-05-09 16:01:05 -0300 |
| commit | 245e133042b160ca9f28b4be13d2b5c8e0edba70 (patch) | |
| tree | d44892a5c7346f765823d2694c279e2ee4c529bb /docs/configuration/firewall/ipv4.rst | |
| parent | 7b2427f73df9f4fc6bf05cd59fa83781c0e4ce2e (diff) | |
| download | vyos-documentation-245e133042b160ca9f28b4be13d2b5c8e0edba70.tar.gz vyos-documentation-245e133042b160ca9f28b4be13d2b5c8e0edba70.zip | |
Firewall: add documentation for dynamic firewall groups.
Diffstat (limited to 'docs/configuration/firewall/ipv4.rst')
| -rw-r--r-- | docs/configuration/firewall/ipv4.rst | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/docs/configuration/firewall/ipv4.rst b/docs/configuration/firewall/ipv4.rst index a9459f00..e19ae1bd 100644 --- a/docs/configuration/firewall/ipv4.rst +++ b/docs/configuration/firewall/ipv4.rst @@ -539,6 +539,27 @@ geoip) to keep database and rules updated. criteria. .. cfgcmd:: set firewall ipv4 forward filter rule <1-999999> + source group dynamic-address-group <name | !name> +.. cfgcmd:: set firewall ipv4 input filter rule <1-999999> + source group dynamic-address-group <name | !name> +.. cfgcmd:: set firewall ipv4 output filter rule <1-999999> + source group dynamic-address-group <name | !name> +.. cfgcmd:: set firewall ipv4 name <name> rule <1-999999> + source group dynamic-address-group <name | !name> + +.. cfgcmd:: set firewall ipv4 forward filter rule <1-999999> + destination group dynamic-address-group <name | !name> +.. cfgcmd:: set firewall ipv4 input filter rule <1-999999> + destination group dynamic-address-group <name | !name> +.. cfgcmd:: set firewall ipv4 output filter rule <1-999999> + destination group dynamic-address-group <name | !name> +.. cfgcmd:: set firewall ipv4 name <name> rule <1-999999> + destination group dynamic-address-group <name | !name> + + Use a specific dynamic-address-group. Prepend character ``!`` for inverted + matching criteria. + +.. cfgcmd:: set firewall ipv4 forward filter rule <1-999999> source group network-group <name | !name> .. cfgcmd:: set firewall ipv4 input filter rule <1-999999> source group network-group <name | !name> |