change rule via cli

Heimo
Heimo Posts: 5  Freshman Member
First Comment Second Anniversary
in Security

Dear all,

my name is Heimo and this is my first question. I am not a Firewall specialist and so i changed a rule (webinterface from LAN) unintentionally from allow to deny and so I am not able to access the web gui. For this gui my knowledge is ok.

Does anybody know how to change a secure-policy of a FLEX-100 from deny to allow via cli?

Kind regards

Heimo

Accepted Solution

  • Zyxel_Melen
    Zyxel_Melen Posts: 3,620  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Answer ✓

    Hi @Heimo

    Please try to:

    1. Login to your firewall via SSH/Console.
    2. Use the command "show running-config" to identify this security policy. For example: "secure-policy 8".
    3. Use the command "configure terminal" to enter the configuration mode.
    4. Enter the security policy you found in step 2 to enter the editor mode for this policy.
    5. Use the command "no activate" to disable this policy.
    6. Remember to exit the configuration mode and enter write to save the changes.
    Zyxel Melen


All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 3,620  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Answer ✓

    Hi @Heimo

    Please try to:

    1. Login to your firewall via SSH/Console.
    2. Use the command "show running-config" to identify this security policy. For example: "secure-policy 8".
    3. Use the command "configure terminal" to enter the configuration mode.
    4. Enter the security policy you found in step 2 to enter the editor mode for this policy.
    5. Use the command "no activate" to disable this policy.
    6. Remember to exit the configuration mode and enter write to save the changes.
    Zyxel Melen


  • Heimo
    Heimo Posts: 5  Freshman Member
    First Comment Second Anniversary

    Dear Zyxel_Melen,

    thank you very much, a few minutes ago I could change it. I had to allow a rule, which I

     i changed unintentionally from allow to deny . It was only the syntax I did not know.
    I did this:
    - configure terminal
    - secure-policy 28
    - action allow
    - service https
    - exit
    - write

    And now it works. Thank you very much for trying to help me. I learned a lot by trying very hard to find a solution.

    Greetings from Austria

    Kind regards

    Heimo

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）