Enabling IP filtering using the CLI

Use the commands in this section to enable IP filtering.

Note
The default rules do not place any restrictions on incoming and outgoing packets on ether* interfaces. You may add rules using the CLI. Use caution to not block access to needed network services.
IP filtering is automatically enabled when you connect to Managed Defense, described in the Managed Defense Quick Start Guide.

To view the active rules:

Go to CLI enable mode:
hostname > enable

View the rules:

hostname # show ip filter

hostname # show ipv6 filter

To enable IP filtering:

Go to CLI configuration mode:
hostname > enable
hostname # configure terminal
Enable IP filtering:
hostname (config) # ip filter enable
hostname (config) # ipv6 filter enable
Save your changes:
hostname (config) # write memory