Siemens SCALANCE S615 - Page 322

Security and authentication
9.2 Firewall
SCALANCE S615 Command Line Interface
322 Configuration Manual, 06/2015, C79000-G8976-C406-02
Parameter
Description
Range of values / note
drop
The data packets are discarded
without any notification to the
sender.
-
rej
The data packets are rejected,
and the sender receives a corre-
sponding message.
-
service
Keyword for service or protocol
name
-
name
Service or protocol name for
which this rule is valid
Enter a valid name.
log
Keyword for making entries in the
firewall log
-
none
The rule coming into effect is not
logged.
-
info
Messages about event severity
"information" are logged.
-
war
Messages about event severity
"warning" are logged.
-
cri
Messages about event severity
"critical" are logged.
-
prior
Keyword for the priority
-
integer
Priority Enter the priority for the IPv4 rule.
0 ... 64
For information on identifiers of addresses and interfaces, refer to the section "Commands in
the FIREWALL configuration mode (Page 313)".
Result
The IPv4 rule is created. When it is created, the IPv4 rule is automatically given a unique
number (index).
Further notes
You display this setting and other information with the show firewall ip-rules ipv4
command.
You create a service with the following commands:
icmp name, service name.
You create a protocol with the
proto name command.
You change the settings with the commands
ipv4rule and set....