Merge pull request #1035 from nicolas-fort/T5160-new_fwall_cli

T5160: New firewall cli - Update documentation for new firewall structure
This commit is contained in:
Christian Breunig 2023-08-16 21:38:08 +02:00 committed by GitHub
commit 1cbd6eb89c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 2095 additions and 568 deletions

File diff suppressed because it is too large Load Diff

File diff suppressed because it is too large Load Diff

View File

@ -2,9 +2,23 @@
Firewall
########
Starting from VyOS 1.4-rolling-202308040557, a new firewall structure
can be found on all vyos instalations. Documentation for most new firewall
cli can be found here:
.. toctree::
:maxdepth: 1
:includehidden:
general
Also, for those who haven't update to newer version, legacy documentation is
still present and valid for all sagitta version prior to VyOS
1.4-rolling-202308040557:
.. toctree::
:maxdepth: 1
:includehidden:
general-legacy
zone

View File

@ -6,6 +6,10 @@
Zone Based Firewall
###################
.. note:: **Important note:**
This documentation is valid only for VyOS Sagitta prior to
1.4-rolling-YYYYMMDDHHmm
In zone-based policy, interfaces are assigned to zones, and inspection policy
is applied to traffic moving between the zones and acted on according to
firewall rules. A Zone is a group of interfaces that have similar functions or