Draytek Vigor2120n-plus - Telnet Command: Ipf Set

Vigor2120 Series User’s Guide
433
ipf view [-VcdhrtzZ]
S
S
y
y
n
n
t
t
a
a
x
x
D
D
e
e
s
s
c
c
r
r
i
i
p
p
t
t
i
i
o
o
n
n
Parameter Description
-V
It means to show the version of this IP filter.
-c
It means to show the running call filter rules.
-d
It means to show the running data filter rules.
-h
It means to show the hit-number of the filter rules.
-r
It means to show the running call and data filter rules.
-t
It means to display all the information at one time.
-z
It means to clear a filter rule’s statistics.
-Z
It means to clear IP filter’s gross statistics.
E
E
x
x
a
a
m
m
p
p
l
l
e
e
> ipf view -V -c -d
ipf: IP Filter: v3.3.1 (1824)
Kernel: IP Filter: v3.3.1
Running: yes
Log Flags: 0x80947278 = nonip
Default: pass all, Logging: available
T
T
e
e
l
l
n
n
e
e
t
t
C
C
o
o
m
m
m
m
a
a
n
n
d
d
:
:
i
i
p
p
f
f
s
s
e
e
t
t
This command is used to set general rule for firewall.
ipf set [Options]
ipf set [SET_NO] rule [RULE_NO] [Options]
S
S
y
y
n
n
t
t
a
a
x
x
D
D
e
e
s
s
c
c
r
r
i
i
p
p
t
t
i
i
o
o
n
n
Parameter Description
Options
There are several options provided here, such as -v, -c
[SET_NO], -d [SET_NO],… and etc.
SET_NO
It means to specify the index number (from 1 to 12) of filter
set.
RULE_NO
It means to specify the index number (from 1 to 7) of filter
rule set.
-v
Type “-v” to view the configuration of general set.
-c [SET_NO]
It means to setup Call Filter, e.g., -c 2. The range for the
index number you can type is “0” to “12” (0 means “disable).
-d [SET_NO]
It means to setup Data Filter, e.g., -d 3. The range for the
index number you can type is “0” to “12” (0 means “disable).
-l [VALUE]
It means to setup Log Flag, e.g., -l 2
Type “0” to disable the log flag.
Type “1” to display the log of passed packet.