Merge pull request #1035 from nicolas-fort/T5160-new_fwall_cli

T5160: New firewall cli - Update documentation for new firewall structure
This commit is contained in:
Christian Breunig 2023-08-16 21:38:08 +02:00 committed by GitHub
commit 1cbd6eb89c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 2095 additions and 568 deletions

File diff suppressed because it is too large Load Diff

File diff suppressed because it is too large Load Diff

View File

@ -2,9 +2,23 @@
Firewall Firewall
######## ########
Starting from VyOS 1.4-rolling-202308040557, a new firewall structure
can be found on all vyos instalations. Documentation for most new firewall
cli can be found here:
.. toctree:: .. toctree::
:maxdepth: 1 :maxdepth: 1
:includehidden: :includehidden:
general general
Also, for those who haven't update to newer version, legacy documentation is
still present and valid for all sagitta version prior to VyOS
1.4-rolling-202308040557:
.. toctree::
:maxdepth: 1
:includehidden:
general-legacy
zone zone

View File

@ -6,6 +6,10 @@
Zone Based Firewall Zone Based Firewall
################### ###################
.. note:: **Important note:**
This documentation is valid only for VyOS Sagitta prior to
1.4-rolling-YYYYMMDDHHmm
In zone-based policy, interfaces are assigned to zones, and inspection policy In zone-based policy, interfaces are assigned to zones, and inspection policy
is applied to traffic moving between the zones and acted on according to is applied to traffic moving between the zones and acted on according to
firewall rules. A Zone is a group of interfaces that have similar functions or firewall rules. A Zone is a group of interfaces that have similar functions or