security zone Untrust
exit
route-map BGP
rule 1
exit
exit
router bgp 64498
neighbor 198.51.100.2
remote-as 64497
address-family ipv4 unicast
enable
exit
enable
exit
enable
exit
interface gigabitethernet 1/0/3
security-zone Untrust
ip address 198.51.100.1/30
exit
security zone-pair Untrust self
rule 1
action permit
match protocol tcp
match destination-port port-range 179
enable
exit
rule 2
action deny
enable
exit
exit
|