From 433a274ce636573953f8a4be9c68743a2ed1d0a5 Mon Sep 17 00:00:00 2001 From: omnom62 <75066712+omnom62@users.noreply.github.com> Date: Thu, 27 Aug 2026 04:00:17 +1000 Subject: T8220: Firewall Zone Policy support (#447) Add zone base policy firewall module --- docs/vyos.vyos.vyos_firewall_global_module.rst | 326 +++++++++++++++++++++++++ 1 file changed, 326 insertions(+) (limited to 'docs') diff --git a/docs/vyos.vyos.vyos_firewall_global_module.rst b/docs/vyos.vyos.vyos_firewall_global_module.rst index 8ab253c2..f7e4605d 100644 --- a/docs/vyos.vyos.vyos_firewall_global_module.rst +++ b/docs/vyos.vyos.vyos_firewall_global_module.rst @@ -800,6 +800,332 @@ Parameters
(strict) Enable Strict Reverse Path Forwarding as defined in RFC3704.
+ + + +
+ zone + +
+ list + / elements=dictionary +
+ + + + +
Defines a firewall zone.
+ + + + + + +
+ default_action + +
+ string +
+ + + + + +
Specifies the default action for the zone.
+ + + + + + +
+ default_log + +
+ boolean +
+ + + + + +
Specifies whether or not to log packets for the firewall zone.
+ + + + + + +
+ description + +
+ string +
+ + + + +
Allows you to specify a brief description for the firewall zone.
+ + + + + + +
+ interfaces + +
+ list + / elements=string +
+ + + + +
Specifies the interfaces associated with the zone.
+ + + + + + +
+ intra_zone_filtering + +
+ dictionary +
+ + + + +
Specifies a policy for intra-zone filtering.
+ + + + + + + +
+ action + +
+ string +
+ + + + + +
Action for intra-zone traffic.
+ + + + + + + +
+ firewall + +
+ dictionary +
+ + + + +
Firewall ruleset to apply to intra-zone traffic.
+ + + + + + + + +
+ ipv6_name + +
+ string +
+ + + + +
Name of the IPv6 firewall ruleset to apply to intra-zone traffic.
+ + + + + + + + +
+ name + +
+ string +
+ + + + +
Name of the firewall ruleset to apply to intra-zone traffic.
+ + + + + + + + +
+ local_zone + +
+ boolean +
+ + + + + +
Specifies whether or not the zone is local.
+ + + + + + +
+ name + +
+ string + / required +
+ + + + +
Name of the firewall zone.
+ + + + + + +
+ sources + +
+ list + / elements=dictionary +
+ + + + +
Specifies the source zones for the firewall rules.
+ + + + + + + +
+ firewall + +
+ dictionary +
+ + + + +
Firewall ruleset to apply to the source zone.
+ + + + + + + + +
+ ipv6_name + +
+ string +
+ + + + +
Name of the IPv6 firewall ruleset to apply to the source zone.
+ + + + + + + + +
+ name + +
+ string +
+ + + + +
Name of the firewall ruleset to apply to the source zone.
+ + + + + + + + +
+ zone + +
+ string + / required +
+ + + + +
Name of the source zone.
+ + + + -- cgit v1.2.3