`outbound-firewall`

Creates or updates the outbound firewall configuration.

Syntax

outbound-firewall

no outbound-firewall

After the outbound-firewall command is entered to enter Outbound Firewall configuration mode, the following configuration syntax is available:

[ enable | ip-rule profile-name out { sctp | tcp | udp { dport port | sport port } } } [ dst | scr ] ip-address

no ip-rule profile-name

Command Default

An outbound firewall is not configured.

Parameters

enable

Enables all outbound traffic.

ip-rule profile-name out

Allows output traffic for the specified IP rule table profile through the outbound firewall.

Modes

Global configuration mode

Usage Guidelines

In Outbound Firewall configuration mode the no ip-rule profile-name command options removes the specified IP rule profile.

This command is supported on all SmartZone platforms except SmartZone Data Plane controller.

The no form of this command disables the outbound firewall.

Examples

The following example shows how to allow TCP outbound traffic for the destination IP address 10.10.2.4 through the outbound firewall.

device# config
device(config)# outbound-firewall
device(config-outbound-firewall)# ip-rule profile1 out tcp dport eth2 dst 10.10.2.4

outbound-firewall