Vyatta NOS documentation

Learn how to install, configure, and operate Vyatta Network Operating System (Vyatta NOS), which helps to drive our virtual networking and physical platforms portfolio.

Applying the rule sets to the zones

The following example shows how to apply the rule set to the private zone. The example assumes rule sets named to_private and to_dmz have been created.

Table 1. Applying a rule set to the private zone
Step Command

Apply a description to the dmz zone.

vyatta@R1# set security zone-policy zone dmz description “DMZ Zone”

Apply the interface to the zone.

vyatta@R1# set security zone-policy zone dmz interface dp0p1p0

Apply a description to the private zone.

vyatta@R1# set security zone-policy zone private description “Private Zone”

Apply the interface to the zone.

vyatta@R1# set security zone-policy zone private interface dp0p1p1

Apply the to_private rule set to the private zone.

vyatta@R1# set security zone-policy zone dmz to private firewall to_private

Apply the to_dmz rule set to the dmz zone.

vyatta@R1# set security zone-policy zone private to dmz firewall to_dmz

Commit the configuration.

vyatta@R1# commit

Show the private zone policy configuration.

vyatta@R1# show security zone-policy 

zone dmz {
     description “DMZ Zone.”
     interface dp0p1p0
     to private {
         firewall to-private
         firewall to-private
    }
}
zone private {
     description “Private Zone.”
     interface dp0p1p1
    }
}
[edit]