ZyXEL Communications 3.1 User Manual

Page of 386
 Chapter 22 IDP Commands
ZyWALL (ZLD) CLI Reference Guide
183
22.3.1.1  Example of Global Profile Commands
In this example we rename an IDP signature profile from “old_profile” to “new_profile”, delete the 
“bye_profile” and show all base profiles available.
22.3.2  IDP Zone to Zone Rules
Use the following rules to apply IDP profiles to specific directions of packet travel. 
Router# configure terminal
Router(config)# idp rename signature
 
old_profile new_profile
Router(config)# no idp signature bye_profile
Router(config)# show idp signature base profile
No.  Base Profile Name
==============================================================
1    none
2    all
3    wan
4    lan
5    dmz
Router(config)#
Table 101   
IDP Zone to Zone Rule Commands
COMMAND
DESCRIPTION
idp {signature| anomaly } rule { append | 
<1..32> | insert <1..32> }
Create an IDP signature or anomaly rule and enter the sub-command 
mode.
bind profile
Binds the IDP profile to the entry’s traffic direction.
no bind
Removes the IDP profile’s binding.
[no] from-zone zone_profile
Specifies the zone the traffic is coming from. The no command removes 
the zone specification.
[no] to-zone zone_profile
Specifies the zone the traffic is going to. The no command removes the 
zone specification.
[no] activate
Turns on the IDP profile to traffic direction binding. The no command 
turns it off.
idp {signature| anomaly } rule { delete 
<1..32> | move <1..32> to <1..32> }
Remove or move an IDP profile to traffic direction entry.
no idp {signature| anomaly } rule <1..32>
Removes an IDP profile to traffic direction entry.
show idp {signature| anomaly } rules
Displays the IDP zone to zone rules.