Disable "Firewall incoming traffic" on a network interface using CLI command

Products

• ProxySG Software - SGOS

Issue/Introduction

How to disable "Firewall incoming traffic" on a network adapter/interface setting using CLI command instead of Management Console.

Resolution

The "Firewall incoming traffic" option on the network interface can be enabled or disabled with "reject-inbound (enable|disable)" CLI command.

 

# conf t
#(config) interface 1:0
#(config interface 1:0) view
  Ethernet interface 1:0 (WAN)
    Internet address:     ##.###.###.## netmask ###.###.###.#
    Internet address:     ####::###:####:####:#### prefixlen 64
    Internet address:     ####:####:#:##::### prefixlen 64
    MTU size:             1500
    Link status:          autosensed to full duplex, 100 megabits/sec network
    Reject inbound:       disabled
    Allow intercept:      enabled
    VLAN trunk:           enabled
    Native VLAN:          1
    Spanning tree:        disabled
    IPv6 auto-linklocal:  enabled
    Member of the bridge: passthru-1
#(config interface 1:0)reject-inbound enable
  ok

#(config interface 1:0)view

  Ethernet interface 1:0 (WAN)

    Internet address:     ##.###.###.## netmask ###.###.###.#
    Internet address:     ####::###:####:####:#### prefixlen 64
    Internet address:     ####:####:#:##::### prefixlen 64

    MTU size:             1500

    Link status:          autosensed to full duplex, 100 megabits/sec network

    Reject inbound:       enabled

    Allow intercept:      disabled

    VLAN trunk:           enabled

    Native VLAN:          1

    Spanning tree:        disabled

    IPv6 auto-linklocal:  enabled

    Member of the bridge: passthru-1