Enterasys APS-3000 Spezifikationen Seite 339

  • Herunterladen
  • Zu meinen Handbüchern hinzufügen
  • Drucken
  • Seite
    / 500
  • Inhaltsverzeichnis
  • LESEZEICHEN
  • Bewertet. / 5. Basierend auf Kundenbewertungen
Seitenansicht 338
Enterasys Wireless Controller Software CLI Reference Guide 18-9
Usage
Ifthespecifiedrulepositionalreadycontainsafilterrule,thiscommandinsertsaruleinthe
specifiedpositioninthelistandresequencesallotherrulesbelowthisrulebyoneposition.Use
thecreatecommandtoinsertorappendaruleatthespecifiedlistposition.
Ifadvancedfilter
modehasbeenenabledwiththeenableadvancefilteringcommand(page203),
theAdvancedmodesyntaxispresented.Ifadvancedfiltermodeisnotenabled,theBasicmode
syntaxispresented.
Examples
Thefollowingexamplecreatesafilter rule1thatallowsUDPtrafficinbothdirectionsfromthe
associatedtopology’sinterfacesubnetforports10throu gh2000:
EWC.enterasys.com:vnsmode:default-policy:acfilters# create 1 proto udp interface-
subnet port 10 2000 in dst out src allow
EWC.enterasys.com:vnsmode:default-policy:acfilters# apply
EWC.enterasys.com:vnsmode:default-policy:acfilters# show
Enable AP filtering: disable
filter 1 proto udp interface-subnet port 10 2000 in dst out src allow
filter 2 (default) proto none 0.0.0.0 all_ports in dst out src deny
EWC.enterasys.com:vnsmode:default-policy:acfilters#
type<type>[<type>] SpecifiesanICMPtypeorrangeofICMPtypes.Thisparameterisonly
validwhenICMPisthespecifiedprotocol.Validvaluesarefrom0‐
255.
Basic:in(none|dst)
Advanced:
in(none|src|dst|both)
Specifiesthedirectionofpacketflow.inspecif iesapacketflowfrom
theAPtotheAC
(intonetwork).
nonespecifiesthattheindirectiondoesnotapplytothefilterrule.
dstspecifiesthattheIPaddressforthisfilterruleisthedestinationof
thepacketflow.
srcspecifiesthattheIPaddressforthisfilterruleisthesourceofthe
packetflow.
bothspecifies
thattheIPaddressforthisfilterrulecanbeeithersource
ordestination.
Basic:out(none|src)
Advanced:
out
(none|src|dst|both)
Specifiesthedirectionofpacketflow.outspecifiesapacketflow
fromtheACtotheAP(outofnetwork).
nonespecifiesthattheoutdirectiondoesnotapplytothe
filterrule.
dstspecifiesthatthe IPaddressforthisfilterruleisthedestinationof
thepacketflow.
srcspecifiesthattheIPaddressforthisfilterruleisthesourceofthe
packetflow.
bothspecifiesthattheIP addressforthisfilterrulecanbeeithersource
or
destination.
allow|deny Specifieswhetherpacketswillbeallowedordeniedwhenmeetingthe
criteriaspecifiedinthefilterrule.
Seitenansicht 338
1 2 ... 334 335 336 337 338 339 340 341 342 343 344 ... 499 500

Kommentare zu diesen Handbüchern

Keine Kommentare