Enterasys APS-3000 Specifikace Strana 341

  • Stažení
  • Přidat do mých příruček
  • Tisk
  • Strana
    / 500
  • Tabulka s obsahem
  • KNIHY
  • Hodnocené. / 5. Na základě hodnocení zákazníků
Zobrazit stránku 340
Enterasys Wireless Controller Software CLI Reference Guide 18-11
Usage
Ifthespecifiedrulepositionalreadycontainsafilterrule,theconfigcommandoverwritesthe
existingrule.Usethecreatecommandtoinsertorappendaruleatthespecifiedposition.
Ifadvancedfiltermodehasbeenenabledwiththeenableadvancefilteringcommand(page203),
theAdvancedmodesyntax
ispresented.Ifadvancedfiltermodeisnotenabled,theBasicmode
syntaxispresented.
Examples
Thefollowingexampleoverwritesapreexistingfilterrule1witharulethatallowsICMPtraffic
types9through31inbothdirectionsfortheassociatedtopology’s:
EWC.enterasys.com:vnsmode:default-policy:acfilters# config 1 proto icmp
interface-subnet type 9 31 in dst out src allow
EWC.enterasys.com:vnsmode:default-policy:acfilters# apply
EWC.enterasys.com:vnsmode:default-policy:acfilters# show
interfaceip SpecifiestheIPaddressoftheassociatedtopologywillbeusedforthis
filterrule.
port<port>
[<port>]
SpecifiesaTCPorUDPportorportrangetowhichthisfi lterrulewill
beapplied.Thefirstvaluespecifieseithertheportorthestartofaport
range.Thesecond
valueoptionallyspecifiestheendofaportrange.
ThisparameterisonlyvalidwheneitherTCPorUDPisthespecified
protocol.Validportvaluesarefrom0‐65535.
type<type>[<type>] SpecifiesanICMPtypeorrangeofICMPtypes.Thisparameterisonly
validwhenICMPisthespecified
protocol.Validvaluesare from0‐
255.
Basic:in(none|dst)
Advanced:
in(none|src|dst|both)
Specifiesthedirectionofpacketflow.inspecif iesapacketflowfrom
theAPtotheAC(intothenetwork).
nonespecifiesthattheindirectiondoesnotapplytothefilterrule.
dstspecifiesthattheIP
addressforthisfilterruleisthedestinationof
thepacketflow.
srcspecifiesthattheIPaddressforthisfilterruleisthesourceofthe
packetflow.
bothspecifiesthattheIP addressforthisfilterrulecanbeeithersource
ordestination.
Basic:out(none|src)
Advanced:
out
(none|src|dst|both)
Specifies
thedirectionofpacketflow.outspecifies apacketflow
fromtheACtotheAP(outofthenetwork).
nonespecifiesthattheoutdirectiondoesnotapplytothefilterrule.
dstspecifiesthatthe IPaddressforthisfilterruleisthedestinationof
thepacketflow.
srcspecifiesthattheIPaddressforthisfilterruleisthesourceofthe
packetflow.
bothspecifiesthattheIP addressforthisfilterrulecanbeeithersource
ordestination.
allow|deny Specifieswhetherpacketswillbeallowedordeniedwhenmeetingthe
criteriaspecifiedinthefilter
rule.
Zobrazit stránku 340
1 2 ... 336 337 338 339 340 341 342 343 344 345 346 ... 499 500

Komentáře k této Příručce

Žádné komentáře