USG110 ip-exception

JaapHoetmer
Posts: 3
in Security
Hello,
I am trying to set up ip-exception on a USG110, but the commands listed in the CLI reference are not available on the device.
https://www.zyxel.ch/de/support/download/205152/, chapter 45.
Running firmware version is 4.73, the CLI reference covers v4.10-4.60.
The first command to enable this should be
security-service ip-exception <profile_name>
however, the command security-service isn't even available.
Can anybody shed some light on this?
Your help is much appreciated.
Kind regards,
Jaap
0
All Replies
-
@JaapHoetmer
The design of USG is a little bit different with ATP/USG FLEX.
USG does not support IP exception feature.
But you can create a security policy to bypass security check of a specific source IP/destination IP on USG.
1. Create address object, for example object name is SOURCE_IP, DESTINATION_IP
2. Insert a secure policy rule on the top with the first priority order,
secure-policy insert 1name RULE01sourceip SOURCE_IPdestinationip DESTINATION_IPaction allow0 -
0
Categories
- 6.9K All Categories
- 2 Education Center
- 1.4K Nebula
- 34 Nebula Ideas
- 40 Nebula Status and Incidents
- 3.9K Security
- 203 Security Ideas
- 748 Switch
- 31 Switch Ideas
- 627 WirelessLAN
- 9 WLAN Ideas
- 4.6K Consumer Product
- 104 Service & License
- 223 News and Release
- 39 Security Advisories
- 520 FAQ
- 238 Nebula FAQ
- 120 Security FAQ
- 73 Switch FAQ
- 67 WirelessLAN FAQ
- 6 Consumer Product FAQ
- Documents
- 30 Nebula Monthly Express
- 44 About Community
- 31 Security Highlight