Siemens SCALANCE W1750D CLI - Inbound-Firewall

CLI Commands
4.9 I
SCALANCE W1750D CLI
170 Function Manual, 03/2019, C79000-G8976-C452-04
4.9.5 inbound-firewall
Description
This command configures inbound firewall rules based on the source subnet.
Syntax
inbound-firewall
rule <subnet> <smask> <dest> <mask> <match/invert> <protocol> <sport> <eport>
{permit|deny|src-nat|dst-nat ip <IP-address> <port>}[<option1....option9>]
no…
Parameter
Description
Range
Default
inbound-firewall
Opens the inbound firewall configuration mode.
—
—
rule
Creates an access rule.
You can create up to 128 access rules. However,
it is recommended to delete any existing configu-
ration and apply changes at regular intervals.
— —
<subnet>
Allows you to specify the source subnet IP
address
— —
<smask>
Specifies the subnet mask of the source IP
address.
— —
<dest>
Allows you to specify the destination IP address.
—
—
<mask>
Specifies the subnet mask for the destination IP
address.
— —
<match/invert>
•
match
—Indicates if the rule specific to the
destination IP address and subnet mask
matches the value specified for protocol.
•
invert
— Indicates if the rule allows or denies
traffic with an exception to the specified desti-
nation IP address and subnet mask.
match invert —
<protocol>
Configures any of the following:
• Protocol number between 0-255
• any: any protocol
• tcp: Transmission Control Protocol
• udp: User Datagram Protocol
1-255 —
<sport>
Specifies the starting port number from which the
rule applies.
1-65534 —
<eport>
Specifies the ending port number until which the
rule applies
1-65534 —
dst-nat
Allows the AP to perform destination NAT on
packets.
— —