< Home

firewall third-party-ids trust-interface

Function

The firewall third-party-ids trust-interface command configures the trusted interface for interworking with a third-party IDS.

The undo firewall third-party-ids trust-interface command cancels the preceding configuration.

Format

firewall third-party-ids trust-interface { interface-name | interface-type interface-number }

undo firewall third-party-ids trust-interface { interface-name | interface-type interface-number }

undo firewall third-party-ids trust-interface all

Parameters

Parameter Description Value
interface { interface-name | interface-type interface-number } Specifies an interface.

You can configure only a physical interfaces as a trusted interface.

Views

System view

Default Level

3: Management level

Usage Guidelines

By default, the FW has no trusted interface for interworking with a third-party IDS.

For the secure transmission of interworking packets, you must directly connect the FW to the third-party IDS and must use the firewall third-party-ids trust-interface { interface-name | interface-type interface-number } command to configure trusted interfaces on the FW. The FW analyzes only interworking packets from trusted interfaces and execute corresponding instructions.

You can run the firewall third-party-ids trust-interface { interface-name | interface-type interface-number } command for multiple times to configure multiple trusted interfaces.

You can configure only physical interfaces as trusted interfaces.

Example

# Configure GigabitEthernet 0/0/1 as the trusted interface for the FW to interwork with a third-party IDS.

<sysname> system-view
[sysname] firewall third-party-ids trust-interface GigabitEthernet 0/0/1
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic