diff --git a/docs/configuration/firewall/index.rst b/docs/configuration/firewall/index.rst index b4a884f0..c5be158f 100644 --- a/docs/configuration/firewall/index.rst +++ b/docs/configuration/firewall/index.rst @@ -490,6 +490,12 @@ Applying a Rule-Set to a Zone Before you are able to apply a rule-set to a zone you have to create the zones first. +It helps to think of the syntax as: (see below). The 'rule-set' should be +written from the perspective of: *Source Zone*-to->*Destination Zone* + +.. cfgcmd:: set zone-policy zone from + firewall name + .. cfgcmd:: set zone-policy zone from firewall name .. cfgcmd:: set zone-policy zone from firewall ipv6-name