summaryrefslogtreecommitdiff
path: root/docs/configuration/firewall/zone.rst
diff options
context:
space:
mode:
Diffstat (limited to 'docs/configuration/firewall/zone.rst')
-rw-r--r--docs/configuration/firewall/zone.rst22
1 files changed, 22 insertions, 0 deletions
diff --git a/docs/configuration/firewall/zone.rst b/docs/configuration/firewall/zone.rst
index 0ae9ceef..1ab9c630 100644
--- a/docs/configuration/firewall/zone.rst
+++ b/docs/configuration/firewall/zone.rst
@@ -6,6 +6,10 @@
Zone Based Firewall
###################
+********
+Overview
+********
+
.. note:: Starting from VyOS 1.4-rolling-202308040557, a new firewall
structure can be found on all vyos instalations. Zone based firewall was
removed in that version, but re introduced in VyOS 1.4 and 1.5. All
@@ -18,6 +22,24 @@ Zone Based Firewall
:doc:`legacy firewall configuration </configuration/firewall/general-legacy>`
chapter.
+In this section there's useful information of all firewall configuration that
+is needed for zone-based firewall.
+Configuration commands covered in this section:
+
+.. cfgcmd:: set firewall zone ...
+
+From main structure defined in
+:doc:`Firewall Overview</configuration/firewall/index>`
+in this section you can find detailed information only for the next part
+of the general structure:
+
+.. code-block:: none
+
+ - set firewall
+ * zone
+ - custom_zone_name
+ + ...
+
In zone-based policy, interfaces are assigned to zones, and inspection policy
is applied to traffic moving between the zones and acted on according to
firewall rules. A zone is a group of interfaces that have similar functions or