security zone

security zone(1)	      BIG-IP TMSH Manual	      security zone(1)



NAME
       zone - Configures firewall zones.

MODULE
       security

SYNTAX
       Zones are reusable objects that are used to classify traffic in
       firewall policy. Zone is defined as consisting of one or more Vlans,
       and traffic matching one of the zone member Vlans belongs to the Zone.
       Zone object can be used as a "source" or "destination" specifier in
       Firewall policy rules to either mean originating from, or destined-to
       traffic.  Modify the zone component within the security zone module
       using the syntax shown in the following sections.

   CREATE/MODIFY
	create zone [name]
	 options:
	  copy-from [string]
	modify zone [name]
	 options:
	  vlans [add | delete | modify | replace-all-with] {
	     [ vlan_name ]
	  }
	  vlans none

	edit zone

   DISPLAY
	list zone
	show running-config zone
	 options:
	  all-properties
	  non-default-properties
	  one-line

DESCRIPTION
       You can use the zone component to configure a shareable and reusable
       set of network firewall zones which can be associated as enforced or
       staged with a number of configuration objects of the following types:
       security firewall policy.

EXAMPLES
       modify zone vlans add {
	 vlan-1 { }
	 vlan-2 { } }

       Creates a zone configuration that includes vlan-1 and vlan-2 as
       members.

       list zone

       Displays the current list of zones.

OPTIONS
       copy-from
	    (CREATE)Specifies the name of an existing policy from which to
	    copy all configuration options.

       vlans
	    Adds, deletes, or replaces a zone vlan member. Specifies one or
	    more vlans against which the packet will be compared, when used
	    with security firewall policy rules.

SEE ALSO
       create, edit, list, modify, security firewall policy, tmsh

COPYRIGHT
       No part of this program may be reproduced or transmitted in any form or
       by any means, electronic or mechanical, including photocopying,
       recording, or information storage and retrieval systems, for any
       purpose other than the purchaser's personal use, without the express
       written permission of F5 Networks, Inc.

       F5 Networks and BIG-IP (c) Copyright 2018. All rights reserved.



BIG-IP				  2018-06-27		      security zone(1)