History
Version
Description
The interface schedule command has been introduced.
2.06
3.20.97 interface security-level
Description
Specify the interface security level. The security levels define the firewall logic:
• Allow establishing
private
→
public
connections.
• Prohibit establishing connections coming to the
public
interface, i. e. in
the direction
public
→
private
and
public
→
public
.
• The device itself accepts network connections (allows control) only from
private
interfaces.
• Data transfer between
private
interfaces can be allowed or disallowed
depending on the
global parameter.
•
protected
interfaces have no access to device and to other
private
/
protected
subnetworks, but they have access to
public
interfaces
and to the internet. The device provides only DHCP and DNS services to
the protected segments.
Note:
By default, to all newly created interfaces
public
security
level assigned.
Access lists
have higher priority than the security
levels, so they can be used to set additional rules of packet
filtering.
Prefix no
No
Change settings
Yes
Multiple input
No
Interface type
IP
Synopsis
(config-if)>
security-level
(
public
|
private
|
protected
)
Example
Despite the fact that there is no functionality to disable the firewall completely,
it is possible to disable it for particular directions. Suppose that it is necessary
to allow data transfer between the “home” network
Home
and global network
PPPoE0
. To accomplish that, to both interfaces must be assigned
private
security level and function
must be disabled.
(config)> interface Home security-level private
(config)> interface PPPoE0 security-level private
(config)> no isolate-private
Keenetic Extra (KN-1710) — Command Reference Guide
145
Chapter 3 Command Reference
Summary of Contents for EXTRA KN-1710
Page 2: ......
Page 6: ...Command Reference Guide Keenetic Extra KN 1710 6 Contents Overview...
Page 20: ...Command Reference Guide Keenetic Extra KN 1710 20 Chapter 1 Product Overview...
Page 26: ...Command Reference Guide Keenetic Extra KN 1710 26 Chapter 2 Introduction to the CLI...
Page 322: ...Command Reference Guide Keenetic Extra KN 1710 322 Chapter 3 Command Reference...
Page 332: ...Command Reference Guide Keenetic Extra KN 1710 332 Glossary...
Page 348: ...Command Reference Guide Keenetic Extra KN 1710 348 Appendix C SNMP MIB...
