Draytek Vigor2862 Series, User Manual

Page: 820 / 988

Vigor2862 Series User’s Guide 804
Log Flag : None
Actions for packet not matching any rule:
Pass or Block : Pass
CodePage : ANSI(1252)-Latin I
Max Sessions Limit: 60000
Current Sessions : 0
Mac Bind IP : Non-Strict
QOS Class : None
APP Enforcement : None
URL Content Filter: None
Load-Balance policy : Auto-select
--------------------------------------------------------------
CodePage : ANSI(1252)-Latin I
Window size : 65535
Session timeout : 1440
DrayTek Banner : Enable
---------------------------------------------------------------
Apply IP filter to VPN incoming packets : Enable
Accept large incoming fragmented UDP or ICMP packets: Enable
----------------------------------------------------------------
Strict Security Checking
[ ]APP Enforcement
>
T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p f f r r u u l l e e
This command is used to set filter rule for firewall.
S
S
y
y
n
n
t
t
a
a
x
x
ipf rule s r [-<command> <parameter> | . ..
ipf rule s r -v
S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n
Parameter Description
s Such word means Filter Set, range form 1~12.
r Such word means Filter Rule, range from 1~7.
<Command><parameter> The following lists all of the available commands with parameters.
-e It means to enable or disable the rule setting.
0- disable
1- enable
-s o:g <obj> It means to specify source IP object and IP group.
o - indicates “object”.
g - indicates “group”.
obj - indicates index number of object or index number of group.
Available settings range from 1-192. For example, “-s g 3" means
the third source IP group profile.
–s u <Address Type> <Start IP
Address> <End IP Address> |
<Address Mask>
It means to configure source IP address including address type,
start IP address, end IP address and address mask.
u – It means “user defined”.
Address Type - Type the number (representing different address