Chapter 4: Using the Command Line Interface
156
config:#
security ipAccessControl ipv6 rule add <direction> <insert> <rule_number>
<ip_mask> <policy>
Variables:
•
<direction> is one of the options:
in
or
out
.
Direction
Description
in
Inbound traffic.
out
Outbound traffic.
•
<ip_mask> is the combination of the IP address and subnet mask values (or prefix length), which are separated with a
slash. For example, an IPv4 combination looks like this:
192.168.94.222/24
.
•
<policy> is one of the options:
accept,
drop
or
reject
.
Policy
Description
accept
Accepts traffic from/to the specified IP address(es).
drop
Discards traffic from/to the specified IP address(es), without sending any failure notification
to the source or destination host.
reject
Discards traffic from/to the specified IP address(es), and an ICMP message is sent to the
source or destination host for failure notification.
•
<insert> is one of the options:
insertAbove
or
insertBelow
.
Option
Description
insertAbove
Inserts the new rule above the specified rule number. Then:
new rule's number = the specified rule number
insertBelow
Inserts the new rule below the specified rule number. Then:
new rule's number = the specified rule 1
•
<rule_number> is the number of the existing rule which you want to insert the new rule above or below.
Modifying a Firewall Rule
Depending on what to modify in an existing rule, the command varies.
