Chapter 4: Using the Command Line Interface
156
•
IPv4 commands
Add a new rule to the bottom of the IPv4 rules list:
config:#
security roleBasedAccessControl ipv4 rule add <start_ip> <end_ip> <role>
<policy>
Add a new IPv4 rule by inserting it above or below a specific rule:
config:#
security roleBasedAccessControl ipv4 rule add <start_ip> <end_ip> <role>
<policy> <insert> <rule_number>
•
IPv6 commands
Add a new rule to the bottom of the IPv6 rules list:
config:#
security roleBasedAccessControl ipv6 rule add <start_ip> <end_ip> <role>
<policy>
Add a new IPv6 rule by inserting it above or below a specific rule:
config:#
security roleBasedAccessControl ipv6 rule add <start_ip> <end_ip> <role>
<policy> <insert> <rule_number>
Variables:
•
<start_ip> is the starting IP address.
•
<end_ip> is the ending IP address.
•
<role> is the role for which you want to create an access control rule.
•
<policy> is one of the options:
allow
or
deny
.
Policy
Description
allow
Accepts traffic from the specified IP address range when the user is a member of the
specified role
deny
Drops traffic from the specified IP address range when the user is a member of the
specified role
•
<insert> is one of the options:
insertAbove
or
insertBelow
.
Option
Description
insertAbove
Inserts the new rule above the specified rule number. Then:
new rule's number = the specified rule number
