Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

PowerScale OneFS 9.6.x.x CLI Administration Guide

PDF

Modify a firewall policy

You can add and remove firewall policies such as network pools and subnets.

Steps

  1. To identify the name of the firewall policy that you want to modify, run the following command: 
    isi network firewall policies list
  2. Run the isi network firewall policies modify <policy_id> command.
    Specify the ID of the policy name, the IDs of the network pools, and IDs of the subnets you want to add or remove. Add network pools by running a command similar to the following. 
    isi network firewall policies modify <policy_id> --add-pools <network pool id,...> --add-subnets <network subnet id,...>

    The <network_pool_id> must be a string that identifies the ID of a pool consisting of a <groupnet_id>, a <subnet_id>, and a pool name separated by a ':' or a '.'. The pool name must be unique throughout the subnet. It must consist of the supported characters [a-z A-Z 0-9-] and may be up to 32 characters long. For example: 

    groupnetA:subnetA:poolA, groupnetA.subnet1.pool1

    The <network_subnet_id> must be a string that identifies the ID of a subnet consisting of a <groupnet_id> and a subnet name that is separated by a ':' or a '.'. The subnet name must be unique throughout the cluster. It must consist of the supported characters [a-z A-Z 0-9-] and may be up to 32 characters long. For example: 

    groupnetA:subnetA_1, groupnetB.subnetB_3
  3. Remove network pools by running a command similar to the following. Note that a subnet or pool must be associated with a firewall policy, either a global policy or a custom policy. Therefore, if you remove a pool from a custom policy, the pool is automatically associated with the global policy. 
    isi network firewall policies modify <policy_id> --remove-pools <network pool id,...> --remove-subnets <network subnet id,...>

Example

NOTE: If a firewall policy has been applied to network subnets or pools, use caution when modifying rules of that policy because some operations take effect immediately on all network subnets and pools that are linked to a policy. If a policy has been applied to any network pools, you must use the --live option to force it to take effect immediately. The --live option must only be used when a user issues a command to modify or delete an active custom policy and to modify the default policy. Using the --live option on an inactive policy will be rejected.
NOTE: The following two policy names are reserved and cannot be used to create a policy: default_pools_policy and default_subnets_policy.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\