summaryrefslogtreecommitdiff
path: root/docs/configuration/firewall
diff options
context:
space:
mode:
authorNicolas Fort <nicolasfort1988@gmail.com>2022-12-23 08:24:04 -0300
committerNicolas Fort <nicolasfort1988@gmail.com>2022-12-23 08:24:04 -0300
commit768cae5fab16adbcc74c9dff0e321381bc294029 (patch)
tree85c43cc87d0cd0b4b314da164a366df71936e2dd /docs/configuration/firewall
parentaade883e244075b3ac6678b64c9da7929e74192a (diff)
downloadvyos-documentation-768cae5fab16adbcc74c9dff0e321381bc294029.tar.gz
vyos-documentation-768cae5fab16adbcc74c9dff0e321381bc294029.zip
T4886: Add connection-mark information to firewall and policy docs.
Diffstat (limited to 'docs/configuration/firewall')
-rw-r--r--docs/configuration/firewall/general.rst7
1 files changed, 7 insertions, 0 deletions
diff --git a/docs/configuration/firewall/general.rst b/docs/configuration/firewall/general.rst
index dc087018..f2e01e03 100644
--- a/docs/configuration/firewall/general.rst
+++ b/docs/configuration/firewall/general.rst
@@ -345,6 +345,13 @@ There are a lot of matching criteria against which the package can be tested.
Match criteria based on nat connection status.
+.. cfgcmd:: set firewall name <name> rule <1-999999> connection-mark
+ <1-2147483647>
+.. cfgcmd:: set firewall ipv6-name <name> rule <1-999999> connection-mark
+ <1-2147483647>
+
+ Match criteria based on connection mark.
+
.. cfgcmd:: set firewall name <name> rule <1-999999> source address
[address | addressrange | CIDR]
.. cfgcmd:: set firewall name <name> rule <1-999999> destination address