[Contents] [Prev] [Next] [Index] [Report an Error]

Example: Configuring an Inbound Traffic Filter for Policy Check

Here, an inbound firewall filter, which performs the final IPSec policy check, is created on security gateway A. This check ensures that only packets that match the traffic configured for this tunnel are accepted.



filter ipsec-decrypt-policy-filter {
term term1 {                                  # perform
policy check


from {
source-address {                      # remote network
10.2.2.0/24; 
}


destination-address {                 # local network
10.1.1.0/24; 
}
then accept;

[Contents] [Prev] [Next] [Index] [Report an Error]