Draytek Vigor2762 series, User Manual

Page: 520 / 651

Example:
Set Subnet Address => -d u 0 192.168.1.10 255.255.255.0
Set Single Address => -d u 1 192.168.1.10
Set Any Address => -d u 2
Set Range Address => -d u 3 192.168.1.10 192.168.1.15
-d o:g <obj> It means to specify destination IP object and IP group.
o – indicates “object”.
g – indicates “group”
<obj>– indicates index number of object or index number of group.
Available settings range from 1-192. For example, “-d g 1" means
the first destination IP group profile.
-S o:g <obj> It means to specify Service Type object and IP group.
o – indicates “object”.
g – indicates “group”
<obj> – indicates index number of object or index number of
group. Available settings range from 1-96. For example, “-S 0 1"
means the first service type object profile.
-S u <protocol>
<source_port__value>
<destination_port_vale>
It means to configure advanced settings for Service Type, such as
protocol and port range.
u – it means “user defined”.
<protocol> – It means TCP(6),UDP(17), TCP/UDP(255).
<source_port__value> –
1 – Port OP, range is 0-3. 0:= =, 1:!=, 2:>, 3:<
3 – Port range of the Start Port Number, range is
1-
65535.
5 – Port range of the End Port Number, range is 1-65535.
<destination_port_value>:
2 – Port OP, range is 0-3, 0:==, 1:!=, 2:>, 3:<
4 – Port range of the Start Port Number, range is
1-
65535.
6 – Port range of the End Port Number, range is 1-65535.
-F <index> <log flag> It means the Filter action you can specify.
index – Available settings contain:
0 –Pass Immediately,
1 – Block Immediately,
2 – Pass if no further match,
3 – Block if no further match.
log flag - 0 means disable to save and display in Syslog; 1 means
enable to save and display in Syslog.
-q <index> <log flag> It means the classification for QoS.
index – Available settings contain:
1– Class 1,
2 – Class 2,
3 – Class 3,
4 – Other
log flag - 0 means disable to save and display in Syslog; 1 means
enable to save and display in Syslog.
-l <wan> <log flag> It means to set load balance policy.
wan – Available settings contain 0 (means auto-select), 1 (means
WAN1), 2 (means WAN2) and 3 (means WAN3).
log flag – 0 means disable to save and display in Syslog; 1 means
enable to save and display in Syslog.
-E<index> It means to enable APP Enforcement for Strict Security Checking.
Vigor2762 Series User’s Guide 510