ZXR108900SeriesCommandManual(FWVolume)
rule
Thisisaboutmanagementofpacketīælteringrules.
rulesetdefaultaction
Command
Function
Thiscommandisusedtosetdefaultpacketīælteringrule.
CommandFormatrulesetdefaultaction<accept|reject>log<yes|no>
Parameter
Description
Parameter
Description
accept|rejectpermit|deny
log
Thisspecifieswhethertorecorditinthelog.
yes|noYes|No
ExampleT osetdefaultpacketīælteringruletopermitandnotrecorditinto
log,executethefollowingcommand:
#rulesetdefaultactionacceptlogno
ruleaddactionl2protocolip
Command
Function
ThiscommandisusedtoaddoneIPpacketīælteringrule.
CommandFormatruleaddaction<accept|reject>l2protocol<ip|0800>[area
<string1>][log<yes|no>][smac<string2>][dmac<string3
>][l3protocol<all|0|tcp|6|udp|17|icmp|1|igmp|2|number
>][sip<string4>][dip<string5>][sport<number1>][dport
<number2>][sport_end<number3>][dport_end<number
4>]
Parameter
Description
Parameter
Description
add
Thisaddsonepacketfilteringrule.
action
Thisistheactiontopacketmeetingrules:
permitordeny.
accept|rejectpermit|deny
l2protocolThisistheL2protocoltypeusedbypacket.
ip|0800IPProtocol
area
Thisspecifiesarearesource.
<string1>
Thisisonestring,whichmustbeone
predefinedarearesource.
log
Thisspecifieswhethertorecorditintolog.
yes|noYes|No
smac
Thissetssourcemacaddress.
120ConfidentialandProprietaryInformationofZTECORPORATION