summaryrefslogtreecommitdiff
path: root/docs/configuration/firewall/ipv6.rst
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-05-10 14:24:22 +0200
committerGitHub <noreply@github.com>2024-05-10 14:24:22 +0200
commit42fe1f06e79c69f04d80f988ca331badcd954cb0 (patch)
tree2dd3e98f82d0ff280f293a9449ff1d6dd37409b8 /docs/configuration/firewall/ipv6.rst
parentfd4b7ff7fcddf8da651d767cb150c5f7d9091ae8 (diff)
parent734c3d98f30f83ee50698cd3d5c69cb6006a8588 (diff)
downloadvyos-documentation-42fe1f06e79c69f04d80f988ca331badcd954cb0.tar.gz
vyos-documentation-42fe1f06e79c69f04d80f988ca331badcd954cb0.zip
Merge pull request #1435 from vyos/mergify/bp/sagitta/pr-1434
Firewall: add documentation for dynamic firewall groups. (backport #1434)
Diffstat (limited to 'docs/configuration/firewall/ipv6.rst')
-rw-r--r--docs/configuration/firewall/ipv6.rst21
1 files changed, 21 insertions, 0 deletions
diff --git a/docs/configuration/firewall/ipv6.rst b/docs/configuration/firewall/ipv6.rst
index 6f343323..29cbe097 100644
--- a/docs/configuration/firewall/ipv6.rst
+++ b/docs/configuration/firewall/ipv6.rst
@@ -526,6 +526,27 @@ geoip) to keep database and rules updated.
criteria.
.. cfgcmd:: set firewall ipv6 forward filter rule <1-999999>
+ source group dynamic-address-group <name | !name>
+.. cfgcmd:: set firewall ipv6 input filter rule <1-999999>
+ source group dynamic-address-group <name | !name>
+.. cfgcmd:: set firewall ipv6 output filter rule <1-999999>
+ source group dynamic-address-group <name | !name>
+.. cfgcmd:: set firewall ipv6 name <name> rule <1-999999>
+ source group dynamic-address-group <name | !name>
+
+.. cfgcmd:: set firewall ipv6 forward filter rule <1-999999>
+ destination group dynamic-address-group <name | !name>
+.. cfgcmd:: set firewall ipv6 input filter rule <1-999999>
+ destination group dynamic-address-group <name | !name>
+.. cfgcmd:: set firewall ipv6 output filter rule <1-999999>
+ destination group dynamic-address-group <name | !name>
+.. cfgcmd:: set firewall ipv6 name <name> rule <1-999999>
+ destination group dynamic-address-group <name | !name>
+
+ Use a specific dynamic-address-group. Prepend character ``!`` for inverted
+ matching criteria.
+
+.. cfgcmd:: set firewall ipv6 forward filter rule <1-999999>
source group network-group <name | !name>
.. cfgcmd:: set firewall ipv6 input filter rule <1-999999>
source group network-group <name | !name>