Security
48
"FD 100/320Gbps NT and FX NT IHub System
Basics, Management and OAM Guide"
3HH-11982-AAAA-TQZZA Issue: 10
—[no] dst-ip {ip-address/mask | ip-address netmask}
—[no] dst-port [tcp/udp port-number] [mask]
—[no] fragment {true | false}
—[no] icmp-code icmp-code
—[no] icmp-type icmp-type
—[no] option-present {true | false}
—[no] service [service-id]
—[no] src-ip {ip-address/mask | ip-address netmask}
—[no] src-port src-port-number [mask]
—[no] tcp-ack {true | false}
—[no] tcp-syn {true | false}
— renum old-entry-id new-entry-id
—[no]
shutdown
— ipv6-filter
—[no] entry entry-id
—[no] action {accept | drop}
—[no] description description-string
—[no] match [next-header next-header]
—[no] dscp dscp-name
—[no] dst-ip {ipv6-address/prefix-length}
—[no] dst-port [dst-port-number [mask]]
—[no] icmp-code icmp-code
—[no] icmp-type icmp-type
—[no] router router-name
—[no] service [service-id]
—[no] src-ip {ipv6-address/prefix-length}
—[no] src-port [src-port-number [mask]]
—[no] tcp-ack {true | false}
—[
no] tcp-syn {true | false}
— renum old-entry-id new-entry-id
—[no] shutdown
4.3.3 Keychain Commands
configure
— system
— security
—[no] keychain keychain-name
— description description-string
— no description
— direction
— bi
— entry entry-id key [authentication-key | hash2-key] [hash2] algorithm algorithm
— no entry entry-id
— begin-time [date] [hours-minutes] [UTC] [now] [forever]
— no begin-time
—[no] shutdown
— tolerance [seconds | forever]
— no tolerance
— uni
— receive
— entry entry-id key [authentication-key | hash2-key] [hash2]
algorithm algorithm
— no entry entry-id
— begin-time [date] [hours-minutes] [UTC] [now] [forever]
— no begin-time
— end-time [date] [hours-minutes] [UTC] [now] [forever]
— no end-time
—[no] shutdown
— tolerance [seconds | forever]
— no tolerance
— send
— entry key [authentication-key | hash2-key] [hash2] algorithm algorithm
— no entry [hash2] algorithm algorithm
— begin-time [date] [hours-minutes] [UTC] [now] [forever]
— no begin-time
—[no] shutdown
—[no] shutdown
— tcp-option-number
— receive option-number