USG110 ip-exception
Options
![JaapHoetmer](https://us.v-cdn.net/6029482/uploads/defaultavatar/nN4PAQRO7TCNP.jpg)
JaapHoetmer
Posts: 3
![First Anniversary](https://us.v-cdn.net/6029482/uploads/badges/SJKCAIG91R5S.png)
![Friend Collector](https://us.v-cdn.net/6029482/uploads/badges/HNJASEUSC535.png)
in Security
Hello,
I am trying to set up ip-exception on a USG110, but the commands listed in the CLI reference are not available on the device.
https://www.zyxel.ch/de/support/download/205152/, chapter 45.
Running firmware version is 4.73, the CLI reference covers v4.10-4.60.
The first command to enable this should be
security-service ip-exception <profile_name>
however, the command security-service isn't even available.
Can anybody shed some light on this?
Your help is much appreciated.
Kind regards,
Jaap
0
All Replies
-
@JaapHoetmer
The design of USG is a little bit different with ATP/USG FLEX.
USG does not support IP exception feature.
But you can create a security policy to bypass security check of a specific source IP/destination IP on USG.
1. Create address object, for example object name is SOURCE_IP, DESTINATION_IP
2. Insert a secure policy rule on the top with the first priority order,
secure-policy insert 1name RULE01sourceip SOURCE_IPdestinationip DESTINATION_IPaction allow0 -
0
Categories
- All Categories
- 413 Beta Program
- 2.3K Nebula
- 192 Nebula Ideas
- 87 Nebula Status and Incidents
- 5.3K Security
- 142 USG FLEX H Series
- 253 Security Ideas
- 1.3K Switch
- 75 Switch Ideas
- 993 Wireless
- 51 Wireless Ideas
- 6.1K Consumer Product
- 231 Service & License
- 362 News and Release
- 74 Security Advisories
- 23 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.6K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 101 About Community
- 67 Security Highlight