Zte ZXR10 8900 Series - Page 140

ZXR108900SeriesCommandManual(FWVolume)
Parameter
Description
l2protocolThisistheL2protocoltypeusedbypacket.
ip|0800IPProtocol
area
Thisspecifiesarearesource.
<string1>
Thisisonestring,whichmustbeone
predefinedarearesource.
log
Thisspecifieswhethertorecorditintolog.
yes|noYes|No
smac
Thissetssourcemacaddress.
<string2>
Thisisonestandardmacaddressstring.
dmacThissetsdestinationmacaddress.
<string3>
Thisisonestandardmacaddressstring.
l3protocolThisistheL3protocoltypeusedbypacket.
all|0|tcp|6|udp|17|i
cmp|1|igmp|2|num
ber
Allprotocols/allprotocols/TCPprotocol/TCP
protocol/UDPprotocol/UDPprotocol/ICMP
protocol/ICMPprotocol/IGMPprotocol/User
inputsspecifiedprotocolnumber
sip
Thisspecifiessourceaddress,whichmustbe
onepredefinedaddress.
<string4>
Thisisonestring.
dip
Thisspecifiesdestinationaddress,whichmust
beonepredefinedaddress.
<string5>
Thisisonestring.
sport
Thisspecifiessourcestartportid.
<number2>Thisisonenumber.
sport_end
Thisspecifiessourceendportid.
<number3>Thisisonenumber.
dport
Thisspecifiesdestinationstartportid.
<number4>Thisisonenumber.
dport_end
Thisspecifiesdestinationendportid.
<number5>Thisisonenumber.
Command
Illustration
Asforexecutionofpolicy,"Firstmatch"principleisadopted,where
policysequenceisrelatedtopolicylogic.Afteraddingonepolicy,
bymovingthepositionofpacketlteringrule,policyexecution
sequencecanbechanged.
ExampleT omodifytheruleandpermitthedevicewhosesourceMACad-
dressis00:50:04:C3:B0:31toaccessthedevicewhosedestina-
tionipisdoc_serveranddestinationportidis8080,executethe
followingcommand,
#ruleaddactionrejectsmac00:50:04:C3:B0:31dip
doc_serverdport8080
124ConfidentialandProprietaryInformationofZTECORPORATION