diff options
author | Robert Göhler <github@ghlr.de> | 2023-11-12 21:43:16 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2023-11-12 21:43:16 +0100 |
commit | f59bff9cdd143fe16c5bd0df7c07d85569643377 (patch) | |
tree | 7644f49dacef3f1012b28b2d9c6c6af908f49829 /docs/configuration/firewall/zone.rst | |
parent | 611faea0a8ab7bf4aa5bc431886798a94e04568c (diff) | |
parent | 2c14b973a3beec881c4a8b3e672ae6e619da9103 (diff) | |
download | vyos-documentation-f59bff9cdd143fe16c5bd0df7c07d85569643377.tar.gz vyos-documentation-f59bff9cdd143fe16c5bd0df7c07d85569643377.zip |
Merge pull request #1144 from nicolas-fort/fwall-nat-update
Fwall nat update
Diffstat (limited to 'docs/configuration/firewall/zone.rst')
-rw-r--r-- | docs/configuration/firewall/zone.rst | 47 |
1 files changed, 33 insertions, 14 deletions
diff --git a/docs/configuration/firewall/zone.rst b/docs/configuration/firewall/zone.rst index 38869c32..1ab9c630 100644 --- a/docs/configuration/firewall/zone.rst +++ b/docs/configuration/firewall/zone.rst @@ -1,25 +1,44 @@ -:lastproofread: 2022-09-14 +:lastproofread: 2023-11-01 .. _firewall-zone: -################################ -Zone Based Firewall (Deprecated) -################################ +################### +Zone Based Firewall +################### + +******** +Overview +******** .. note:: Starting from VyOS 1.4-rolling-202308040557, a new firewall - structure can be found on all vyos instalations, and zone based firewall is - no longer supported. Documentation for most of the new firewall CLI can be + structure can be found on all vyos instalations. Zone based firewall was + removed in that version, but re introduced in VyOS 1.4 and 1.5. All + versions built after 2023-10-22 has this feature. + Documentation for most of the new firewall CLI can be found in the `firewall <https://docs.vyos.io/en/latest/configuration/firewall/general.html>`_ chapter. The legacy firewall is still available for versions before - 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` - chapter. The examples in this section use the legacy firewall configuration - commands, since this feature has been removed in earlier releases. - -.. note:: For latest releases, refer the `firewall (interface-groups) - <https://docs.vyos.io/en/latest/configuration/firewall/general.html#interface-groups>`_ - main page to configure zone based rules. New syntax was introduced here - :vytask:`T5160` + 1.4-rolling-202308040557 and can be found in the + :doc:`legacy firewall configuration </configuration/firewall/general-legacy>` + chapter. + +In this section there's useful information of all firewall configuration that +is needed for zone-based firewall. +Configuration commands covered in this section: + +.. cfgcmd:: set firewall zone ... + +From main structure defined in +:doc:`Firewall Overview</configuration/firewall/index>` +in this section you can find detailed information only for the next part +of the general structure: + +.. code-block:: none + + - set firewall + * zone + - custom_zone_name + + ... In zone-based policy, interfaces are assigned to zones, and inspection policy is applied to traffic moving between the zones and acted on according to |