ELTEX ESR-1000 - Page 467

ESR series service routers.ESR-Series. User manual
467
Step Description Command Keys
34 Specify the profile of transmitter IP
addresses for which the rule should
work (optional).
esr(config-zone-rule)# match [not]
source-address <OBJ-GROUP-
NETWORK-NAME>
<OBJ-GROUP-NETWORK-
NAME> – IP addresses profile
name, set by the string of up to
31 characters. When specifying
the 'any' value, the rule will
work for any sender/recipient
IP address.
35 Set the profile of destination IP
addresses for which the rule should
work (optional).
esr(config-zone-rule)# match [not]
destination-address <OBJ-GROUP-
NETWORK-NAME>
36 Set source MAC address for which the
rule should work (optional).
esr(config-zone-rule)# match [not]
source-mac <mac-addr>
<mac-addr> – defined as
XX:XX:XX:XX:XX:XX where
each part takes the values of
[00..FF].
37 Set sender MAC address for which the
rule should work (optional).
esr(config-zone-rule)# match [not]
destination-mac <mac-addr>
38 Set TCP/UDP ports profile for which the
rule should work (if the protocol is
specified).
esr(config-zone-rule)# match
[not]source-port <PORT-SET-
NAME>
<PORT-SET-NAME> – set by
the string of up to 31
characters. When specifying
the 'any' value, the rule will
work for any sender/recipient
TCP/UDP port.
39 Set the destination TCP/UDP ports
profile for which the rule should work (if
the protocol is specified).
esr(config-zone-rule)# match [not]
destination-port <PORT-SET-
NAME>
40 Specify the type and code of ICMP
messages for which the rule should
work (if ICMP is selected as protocol)
(optional).
esr(config-zone-rule)# match
[not]icmp <ICMP_TYPE>
<ICMP_CODE>
<ICMP_TYPE> – ICMP
message type, takes values of
[0..255].
<ICMP_CODE> – ICMP
message code, takes values of
[0..255]. When specifying the
'any' value, the rule will work for
any ICMP message code.
41 Set the limitation under which the rule
will only work for traffic modified by the
IP address and destination ports
translation service.
esr(config-zone-rule)# match [not]
destination-nat
42 Set the maximum packet rate (optional,
available only for zone-pair any self and
zone-pair <zone-name> any).
esr(config-zone-pair-rule)# rate-
limit pps <rate-pps>
<rate-pps> – maximum amount
of packets that can be
transmitted. Takes values in
the range of [1..10000].
43 Set the filtration only for fragmented IP
packets (optional, available only for
zone-pair any self and zone-pair <zone-
name> any).
esr(config-zone-pair-rule)# match
[not] fragment