Telit LE910 V2 Series AT Commands
80446ST10707A Rev. 0– 2015-11-03
Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 401 of 509
Mod. 0808 2011-07 Rev.2
<net_mask> - mask to be applied on the <ip_addr>; string type, it can be any valid IP
address mask in the format: xxx.xxx.xxx.xxx
Command returns OK result code if successful.
Note: the firewall applies for incoming (listening) connections only.
Firewall general policy is DROP, therefore all packets that are not included into an
ACCEPT chain rule will be silently discarded.
When a packet comes from the IP address incoming_IP, the firewall chain rules will
be scanned for matching with the following criteria:
incoming_IP & <net_mask> = <ip_addr> & <net_mask>
If criteria is matched, then the packet is accepted and the rule scan is finished; if
criteria is not matched for any chain the packet is silently dropped.
Read command reports the list of all ACCEPT chain rules registered in the Firewall
settings in the format:
#FRWL: <ip_addr>,<net_mask>,<status>
#FRWL: <ip_addr>,<net_mask>,<status>
….
OK
where:
<status> - firewall status
0 – not enabled (default)
1 - enabled
Test command returns the allowed values for parameter <action>.
Firewall Setup for IPV6 addresses - #FRWLIPV6
#FRWLIPV6 - Firewall Setup for IPV6 addresses
AT#FRWLIPV6=
[<action>,
<ip_address>,
<net mask>]
Execution command controls the internal firewall settings for IPV6 addresses.
Parameters:
- command action
0 - remove selected chain
1 - add an
chain
2 - remove all chains (
everything);
and
has no
meaning in this case.
3 – enable firewall and save this setting in NVM