This area is used to enable or disable a Datacenter-wide firewall. Currently, our example cluster has the default input/output policy, which is set to drop all incoming traffic while allowing all outgoing traffic. If we were to change the input policy to accept all incoming traffic, then the [OPTIONS] segment would appear as follows:

    [OPTIONS]
    policy_in: ACCEPT
    enable: 1  

If due to firewall rules misconfiguration we locked ourselves out, we can disable the Datacenter-wide firewall using the following option on the console:

    enable: 0