Siemens SCALANCE W1750D CLI - Page 698

CLI Commands
4.20 W
SCALANCE W1750D CLI
698 Function Manual, 03/2019, C79000-G8976-C452-04
Parameter
Description
Range
<match>
•
match
— Indicates if the rule specific to the des-
tination IP address and subnet mask matches the
value specified for protocol.
•
invert
— Indicates if the rule allows or denies
traffic with an exception to the specified destina-
tion IP address and subnet mask.
match
invert
<protocol>
Configures any of the following:
Protocol number between 0-255
• any: any protocol
• tcp: Transmissio n Control Protocol
• udp: User Datagram Protocol
1–255
<sport>
Specifies the starting port number from which the
rule applies.
1–65534
<eport>
Specifies the ending port number until which the rule
applies
1–65534
dst-nat
Allows the AP to perform des- tination NAT on pack-
ets.
—
src-nat [vlan <vlan
id>|tunnel]
Allows the AP to perform source-NAT on packets.
When configured, the source IP changes to the out-
going interface IP address (implied NAT pool) or from
the pool configured (manual NAT pool).
vlan
- All client based traffic will be directed to the
specified uplink VLAN using the IP address of the
interface that AP has on that VLAN; if the interface is
not found, this option has no effect.
tunnel
- The traffic from the Network Assigned clients
is directed to the VPN tunnel.
—
<dst-nat-IP-address>
Specifies the destination- NAT IP address for the
specified packets when dst-nat action is configured.
—
<dst-nat-port>
Specifies the destination- NAT port for the specified
packets when dst-nat action is configured.
—
app <app>
Specifies a rule to allow or deny access to a specific
type of application.
To view the list of
applications, run
the
show dpi app
all command.
appcategory <appgrp>
Specifies a rule to allow or deny access to a specific
category of application.
To view the list of
application catego-
ries,
run the
show dpi
appcategory all
command.
webcategory <webgrp>
Specifies a rule to allow or deny access to websites
based on website category.
To view the list of
website categories,
run the show
dpi
webcategory all
command.