Configure custom firewall rules

Custom firewall rules consist of a script of shell commands that can be used to install firewall rules, ipsets, and other system configuration. These commands are run whenever system configuration changes occur that might cause changes to the firewall.

To configure custom firewall rules:

 

  WebUI

  1. Log into the 6300-CX WebUI as a user with full Admin access rights.
  2. On the menu, click System. Under Configuration, click Device Configuration.

    3. The Configuration window is displayed.

  3. Click Firewall > Custom rules.

  4. Enable the custom rules.
  5. (Optional) Enable Override to override all preconfigured firewall behavior and rely solely on the custom firewall rules.
  6. For Rules, type the shell command that will execute the custom firewall rules script.
  7. Click Apply to save the configuration and apply the change.

  1. Log into the 6300-CX command line as a user with full Admin access rights.

    Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  2. At the command line, type config to enter configuration mode:
    > config
(config)>
  3. Enable custom firewall rules:
    (config)> firewall custom enable true
(config)>
  4. (Optional) Instruct the device to override all preconfigured firewall behavior and rely solely on the custom firewall rules:
    (config)> firewall custom override true
(config)>
  5. Set the shell command that will execute the custom firewall rules script:
    (config)> firewall custom rules "shell-command"
(config)>
  6. Save the configuration and apply the change:
    (config)> save
Configuration saved.
>
  7. Type exit to exit the Admin CLI.

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.