R3303-HP HSR6800 Routers Security Command Reference

384
Syntax
Standalone mode:
firewall enable { all | slot slot-number }
undo firewall enable
IRF mode:
firewall enable { all | chassis chassis-number slot slot-number }
undo firewall enable
Default
The IPv4 firewall function is disabled.
Views
System view
Default command level
2: System level
Parameters
all: Specifies all interface cards.
slot slot-number: Specifies the interface card in the specified slot. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies an interface card in an IRF member device. The
chassis-number argument represents the IRF member ID of the device. The slot-number argument
represents the slot number of the card. (In IRF mode.)
Examples
# Enable the IPv4 firewall function.
<Sysname> system-view
[Sysname] firewall enable
firewall ipv6 default
Use firewall ipv6 default to specify the default firewall filtering action of the IPv6 firewall.
Syntax
firewall ipv6 default { deny | permit }
Default
The default filtering action of IPv6 firewall is permitting packets to pass (permit).
Views
System view
Default command level
2: System level
Parameters
deny: Specifies the filtering action as denying packets to pass the firewall.
permit: Specifies the filtering action as permitting packets to pass the firewall.