summaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
authorNicholas Humfrey <njh@aelius.com>2020-01-24 15:56:08 +0000
committerChristian Poessinger <christian@poessinger.com>2020-01-24 16:56:08 +0100
commit5e650e97c91d715d29548ae1eb8994b596ed0bb0 (patch)
tree46f383e8781227da3b3051b2d4d912e9f41d292c /docs
parent2a86215b07874a5b6db91abd93dd8633bea1834b (diff)
downloadvyos-documentation-5e650e97c91d715d29548ae1eb8994b596ed0bb0.tar.gz
vyos-documentation-5e650e97c91d715d29548ae1eb8994b596ed0bb0.zip
firewall: format fixes for zone
Diffstat (limited to 'docs')
-rw-r--r--docs/appendix/examples/zone-policy.rst9
1 files changed, 7 insertions, 2 deletions
diff --git a/docs/appendix/examples/zone-policy.rst b/docs/appendix/examples/zone-policy.rst
index 666fc99b..635bf35c 100644
--- a/docs/appendix/examples/zone-policy.rst
+++ b/docs/appendix/examples/zone-policy.rst
@@ -327,12 +327,17 @@ from the LAN, destined for the DMZ.
Because the zone-policy firewall syntax is a little awkward, I keep it straight
by thinking of it backwards.
- set zone-policy zone dmz from lan firewall ipv6-name lan-dmz-6
+.. code-block:: none
+
+ set zone-policy zone dmz from lan firewall ipv6-name lan-dmz-6
dmz-lan policy is lan-dmz. You can get a rhythm to it when you build out a bunch at one time.
In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is.
-== IPv6 Tunnel ==
+
+
+IPv6 Tunnel
+^^^^^^^^^^^
If you are using a IPv6 tunnel from HE.net or someone else, the basis is the same except you have two WAN interface. One for v4 and one for v6.