Assigning IPv4 and IPv6 Firewall Filters to Interfaces

For a firewall filter to work, you must assign it to an interface. Use the Configure Firewall Filters pages to assign IPv4 and IPv6 filters to interfaces. Using these pages you can select a firewall filter to evaluate packets that are received or transmitted on a specific interface.

When assigning firewall filters to interfaces, remember that you can assign only one input and one output firewall filter to each interface. However, you can assign the same filter to multiple interfaces.

The Configure Firewall Filters page displays the Services Router interfaces available for filter assignment and the status of existing filter assignments.

To assign IPv4 and IPv6 firewall filters to interfaces that are configured:

In the J-Web interface, select Configure > Security > Filters > Assign To Interfaces.

Note: After you make changes to the configuration in this window, you must commit the changes immediately for them to take effect. To commit all changes to the active configuration, select Commit Options > Commit. See Using the Commit Options to Commit Configuration Changes (J-Web Procedure) for details about all commit options.

Enter information into the Firewall Filters Configure pages, as described in Table 20.
Click Apply on the Firewall Filters Configure main page.

Table 20: Assigning Firewall Filters Configure Pages Summary

Field	Function	Your Action
Firewall Filters
Logical Interface Name	Displays the logical interfaces on a router. Allows you to apply IPv4 and IPv6 firewall filters to packets received on the interface and packets transmitted from the interface.	To apply firewall filters to an interface, click the interface name To apply an input firewall filter, follow instructions in the input firewall filters section. To apply an output firewall filter, follow instructions in the ouput firewall filters section.
Link State	Displays the status of the logical interface.	None.
Input Firewall Filters	Displays the input firewall filter applied on an interface. This filter evaluates all packets received on the interface.	None.
Output Firewall Filters	Displays the output firewall filter applied on an interface. This filter evaluates all packets transmitted from the interface.	None.
Input Firewall Filters
IPv4 Input Filter IPv6 Input Filter	Allows you to apply an input firewall filter to an interface. This filter evaluates all packets received on the interface.	To apply an input firewall filter to an interface, select the name of the firewall filter from the list.
Output Firewall Filters
IPv4 Output Filter IPv6 Output Filter	Allows you to apply an output firewall filter to an interface. This filter evaluates all packets transmitted on the interface.	To apply an output firewall filter to an interface, select the name of the firewall filter from the list.