Create a custom firewall zone

In addition to the preconfigured zones, you can create your custom zones that can be used to configure packet filtering and access control lists for network interfaces.

To create a zone:

 

  Web

  1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
  2. Access the device configuration:

    1. Locate your device as described in Use Digi Remote Manager to view and manage your device.
    2. Click the Device ID.
    3. Click Settings.
    4. Click to expand Config.

    1. On the menu, click System. Under Configuration, click Device Configuration.

      The Configuration window is displayed.

  3. Click Firewall > Zones.
  4. In Add Zone, enter a name for the zone and click .

    The firewall configuration window is displayed.

  5. (Optional) If traffic on this zone will be forwarded from a private network to the internet, enable Network Address Translation (NAT).
  6. Click Apply to save the configuration and apply the change.

See Configure the firewall zone for a network interface for information about how to configure network interfaces to use a zone.

 

  1. Select the device in Remote Manager and click Actions > Open Console, or log into the EX15 local command line as a user with full Admin access rights.

    Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  2. At the command line, type config to enter configuration mode:

    > config
(config)>

  3. Add the new zone. For example, to add a zone named my_zone:
    (config)> add firewall zone my_zone
(config firewall zone my_zone)>
  4. (Optional) Enable Network Address Translation (NAT):
    (config firewall zone my_zone)> src_nat true
(config firewall zone my_zone)>
  5. Save the configuration and apply the change.
    (config firewall zone my_zone)> save
Configuration saved.
>
  6. Type exit to exit the Admin CLI.

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.

See Configure the firewall zone for a network interface for information about how to configure network interfaces to use a zone.