Internal firewall configuration
It is possible to configure the settings of an internal firewall to restrict access to specific items.
You can limit access to the:
- Management interface
- secure shell (SSH) terminal
- simple network management protocol (SNMP) service
- internet control message protocol (ICMP)
Note: It is only possible to do this for physical and virtual
installations. It is not possible for container installations.
Note: To limit access to these services, you must use the
command-line interface (CLI) to add the required configurations.
Note: The default settings permit connections from any
internet protocol (IP) address. The system ignores lines with invalid
IP addresses.
Important: You should use caution when changing internal
firewall rules. This is because you can lose access to the device administration
interface. In the event of an error, console access is required to fix the rules.
The table below gives the configuration settings that let you fine-tune the firewall rules.
| Parameter | Description |
|---|---|
| system firewall icmp | Configure acl for icmp protocol |
| system firewall https | Configure acl for http and https services |
| system firewall ssh | Configure acl for ssh service |
| system firewall snmp | Configure acl for snmp service |