Enterasys APS-3000 Especificaciones Pagina 453

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 500
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 452
Enterasys Wireless Controller Software CLI Reference Guide 20-21
Usage
Ifthespecifiedrulepositionalreadycontainsacustomfilter,thiscommandoverwritesthe
existingrule.Usethecreatecommandtoinsertorappendaruleatthespecifiedposition.
Ifadvancedfiltermodehasbeenenabledwiththeenableadvancefilteringcommand(page203),
theAdvancedmodesyntaxis
presented.Ifadvancedfiltermodeisnotenabled,theBasicmode
syntaxispresented.
Examples
Thefollowingexampleoverwritesapreexistingcustomfilter2witharulethatallowsTCPtraffic
bothdirectionsfromIPaddress50.20.0.0/16:
EWC.enterasys.com:vnsmode:default-policy:apfilters# config 2 proto tcp 50.20.0.0/
16 in dst out src allow
<ipaddress/mask> SpecifiesanIPaddressandmaskforthisfilter.
interfacesubnet SpecifiestheIPaddressandmaskconfiguredfortheassociated
topology.
interfaceip SpecifiestheIPaddressoftheassociatedtopology
port<port>
[<port>]
SpecifiesaTCPorUDPportorportrangetowhichthiscustomfilter
willbeapplied.Thefirstvalue
specifieseithertheportorthestartofa
portrange.Thesecondvalueoptionallyspecifiestheendofarange.
ThisparameterisonlyvalidwheneitherTCPorUDPisthespecified
protocol.ValidPortvaluesarefrom0‐65535.
type<type>[<type>] SpecifiesanICMPtypeorrangeof
ICMPtypes.Thisparameterisonly
validwhenICMPisthespecifiedprotocol.Validvaluesarefrom0‐
255.
Basic:in(none|dst)
Advanced:
in(none|src|dst|both)
Specifiesthedirectionofpacketflow.inspecif iesapacketflowfrom
theAPtotheAC.
nonespecifiesthattheindirectiondoesnotapply
tothefilterrule.
dstspecifiesthattheIPaddressforthisfilterruleisthedestinationof
thepacketflow.
srcspecifiesthattheIPaddressforthisfilterruleisthesourceofthe
packetflow.
bothspecifiesthattheIP addressforthisfilterrulecanbeeither
source
ordestination.
Basic:out(none|src)
Advanced:
out
(none|src|dst|both)
Specifiesthedirectionofpacketflow.outspecifiesapacketflow
fromtheACtotheAP.
nonespecifiesthattheoutdirectiondoesnotapplytothefilterrule.
dstspecifiesthatthe IPaddressforthisfilterruleisthe
destinationof
thepacketflow.
srcspecifiesthattheIPaddressforthisfilterruleisthesourceofthe
packetflow.
bothspecifiesthattheIP addressforthisfilterrulecanbeeithersource
ordestination.
allow|deny Specifieswhetherpacketswillbeallowedordeniedwhenmeetingthe
criteriaspecifiedinthecustomfilter.
Vista de pagina 452
1 2 ... 448 449 450 451 452 453 454 455 456 457 458 ... 499 500

Comentarios a estos manuales

Sin comentarios