HP VPN Firewall Appliances Access Control Command Reference

32
Examples
# Create an interzone instance with the source security zone Trust and destination zone Untrust, and
enable ASPF for the instance.
<Sysname> system-view
[Sysname] interzone source Trust destination Untrust
[Sysname-interzone-Trust-Untrust] firewall aspf enable
# Log in to VD vdtest, create an interzone instance with the source security zone Zoffice and destination
zone Zpublic, and enable ASPF for the instance.
<Sysname> system-view
[Sysname] switchto vdtest
[Sysname-vsys-vdtest] interzone source Zoffice destination Zpublic
[Sysname-vsys-vdtest-interzone-Zoffice-Zpublic] firewall aspf enable
Related commands
zone
priority
Use priority to set the priority of a security zone.
Syntax
priority priority-value
Default
The priority of a user-defined security zone is 1, and the priorities of system-predefined security zones are:
100 for Management, 100 for Local, 85 for Trust, 50 for DMZ, and 5 for Untrust.
Views
Security zone view
Default command level
2: System level
Parameters
priority-value: Specifies the security zone priority in the range of 1 to 100.
Usage guidelines
The priority of a security zone indicates the security zone's security level. The greater the priority (the
highest is 100), the higher the security level. The device allows packets that match no interzone policies
to travel from a higher priority zone to a lower priority zone but prevents them from traveling from a lower
priority zone to a higher priority zone.
Examples
# Set the priority of the security zone with the name zonetest and ID 7 to 50.
<Sysname> system-view
[Sysname] zone name zonetest id 7
[Sysname-zone-zonetest] priority 50
Related commands
zone