ELTEX ESR Series - Page 396

ESR-Series. User manual
396
Step Description Command Keys
33 Set name or number of IP for which the
rule should work (optional).
esr(config-zone-rule)# match [not]
protocol <protocol-type>
<protocol-type> – protocol
type, takes the following
values: esp, icmp, ah, eigrp,
ospf, igmp, ipip, tcp, pim, udp,
vrrp, rdp, l2tp, gre.
When specifying the “any”
value, the rule will work for any
protocols.
esr(config-zone-rule)# match [not]
protocol-id <protocol-id>
<protocol-id> – IP identification
number, takes values of
[0x00-0xFF].
34 Specify the profile of transmitter IP
addresses for which the rule should
work (optional).
esr(config-zone-rule)# match [not]
source-address <OBJ-GROUP-
NETWORK-NAME>
<OBJ-GROUP-NETWORK-
NAME> – IP addresses profile
name, set by the string of up to
31 characters. When specifying
the “any” value, the rule will
work for any sender/recipient
IP address.
35 Set the profile of destination IP
addresses for which the rule should
work (optional).
esr(config-zone-rule)# match [not]
destination-address <OBJ-GROUP-
NETWORK-NAME>
36 Set source MAC address for which the
rule should work (optional).
esr(config-zone-rule)# match [not]
source-mac <mac-addr>
<mac-addr> – defined as
XX:XX:XX:XX:XX:XX where
each part takes the values of
[00..FF].
37 Set sender MAC address for which the
rule should work (optional).
esr(config-zone-rule)# match [not]
destination-mac <mac-addr>
38 Set TCP/UDP ports profile for which the
rule should work (if the protocol is
specified).
esr(config-zone-rule)# match
[not]source-port <PORT-SET-
NAME>
<PORT-SET-NAME> – set by
the string of up to 31
characters. When specifying
the “any” value, the rule will
work for any sender/recipient
TCP/UDP port.
39 Set the destination TCP/UDP ports
profile for which the rule should work (if
the protocol is specified).
esr(config-zone-rule)# match [not]
destination-port <PORT-SET-
NAME>
40 Specify the type and code of ICMP
messages for which the rule should
work (if ICMP is selected as protocol)
(optional).
esr(config-zone-rule)# match
[not]icmp <ICMP_TYPE>
<ICMP_CODE>
<ICMP_TYPE> – ICMP
message type, takes values of
[0..255].
<ICMP_CODE> – ICMP
message code, takes values of
[0..255]. When specifying the
“any” value, the rule will work
for any ICMP message code.