Motorola RFS Series

AAP IP Filtering
27-7
Example
RFS6000(config-aap-ipfilter)#deny all any dst-start-ip
172.16.10.9 dst-end-ip 172.16.10.11 dst-start-port 99 dst-
end-port 100
deny protocol <1-254>
[any|src-start-ip <IP> src-
end-ip <IP>] [any|dst-start-
ip <IP> dst-end-ip <IP>]
[all|dst-start-port <1-
65535> dst-end-port <1-
65535>] rule <1-20>
Denies protocols between 1 and 254.
• [any|src-start-ip <IP> src-end-ip <IP>]– any is an
abbreviation for a source IP of 0.0.0.0 and end IP
255.255.255.255.
• src-start-ip <IP> – The keyword <src-start-ip> is the
source IP address of the network. For example,
10.1.1.10/24 indicates the first 24 bits of the source IP
is used for matching
• src-end-ip <IP> – The keyword <src-end-ip> is the
source end IP address of the network.
• [any|dst-start-ip <IP> dst-end-ip <IP>] – any is an
abbreviation for a destination start / end IP of the
network.
• dst-start-ip <IP> – Defines the destination start IP
address
• dst-end-ip <IP> – Defines the destination end IP
address
• [all|dst-start-port <1-65535> dst-end-port <1-65535>] –
Rejects all the packets.
• dst-start-port <1-65535> – Defines the destination
start port
• dst-end-port <1-65535> – Defines the destination end
port
• rule <1-20> – Define an integer value between 1 and 20.
This value sets the rule precedence on the AAP.