USG110 ip-exception
![JaapHoetmer](https://us.v-cdn.net/6029482/uploads/defaultavatar/nN4PAQRO7TCNP.jpg)
JaapHoetmer
Posts: 3
Freshman Member
![](https://www.zyxel.com/library/assets/zyxel-forum/freshman_member.png)
![Third Anniversary](https://us.v-cdn.net/6029482/uploads/badges/ZAPPM3HN1WUA.png)
![Friend Collector](https://us.v-cdn.net/6029482/uploads/badges/HNJASEUSC535.png)
in Security
Hello,
I am trying to set up ip-exception on a USG110, but the commands listed in the CLI reference are not available on the device.
https://www.zyxel.ch/de/support/download/205152/, chapter 45.
Running firmware version is 4.73, the CLI reference covers v4.10-4.60.
The first command to enable this should be
security-service ip-exception <profile_name>
however, the command security-service isn't even available.
Can anybody shed some light on this?
Your help is much appreciated.
Kind regards,
Jaap
0
All Replies
-
@JaapHoetmer
The design of USG is a little bit different with ATP/USG FLEX.
USG does not support IP exception feature.
But you can create a security policy to bypass security check of a specific source IP/destination IP on USG.
1. Create address object, for example object name is SOURCE_IP, DESTINATION_IP
2. Insert a secure policy rule on the top with the first priority order,
secure-policy insert 1name RULE01sourceip SOURCE_IPdestinationip DESTINATION_IPaction allow0 -
0
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 88 Nebula Status and Incidents
- 5.4K Security
- 166 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 999 Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 233 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight