754
Parameters
ip-address: Specifies the destination IP address of the route. It cannot be a multicast, broadcast, or
loopback address.
mask: Specifies the subnet mask of the destination IP address.
mask-length: Specifies the mask length of the destination IP address, an integer in the range of 0 to
32.
Usage guidelines
To deny user access to specific network nodes or segments behind an SSL VPN gateway, configure
exclude routes for those nodes or segments.
When a client accesses the SSL VPN gateway in IP mode, the SSL VPN gateway issues exclude
routes to the client. The client adds the exclude routes to the local routing table. Traffic that matches
the exclude routes are not sent to the SSL VPN gateway.
You can add multiple exclude routes to a route list.
If you execute the include and exclude command to add the same route to a route list, the most
recent configuration takes effect.
Examples
# Add exclude route 192.168.0.0/16 to route list rtlist.
<Sysname> system-view
[Sysname] sslvpn context ctx1
[Sysname-sslvpn-context-ctx1] ip-route-list rtlist
[Sysname-sslvpn-context-ctx1-route-list-rtlist] exclude 192.168.0.0 16
Related commands
Include
execution (port forwarding item view)
Use execution to configure a resource link for a port forwarding item.
Use undo execution to restore the default.
Syntax
execution script
undo execution
Default
No resource link is configured for a port forwarding item.
Views
Port forwarding item view
Predefined user roles
network-admin
Parameters
script: Specifies the script for the resource link, a string of 1 to 255 characters in the format of
url(‘url-value’). Complete format for url-value is protocol://hostname or address:port
number/resource path.
To Next Page
Loading...
Need help?
General
