Raritan PX2-1000 SERIES, User Manual

Page: 430 / 648

Chapter 8: Using the Command Line Interface
411

<ip_mask> is the combination of the IP address and subnet mask
values (or prefix length), which are separated with a slash. For
example, an IPv4 combination looks like this:
192.168.94.222/24
.

<policy> is one of the options:
accept, drop
or
reject
.
Policy Description
accept Accepts traffic from/to the specified IP
address(es).
drop Discards traffic from/to the specified IP
address(es), without sending any failure
notification to the source or destination host.
reject Discards traffic from/to the specified IP
address(es), and an ICMP message is sent to the
source or destination host for failure notification.

<insert> is one of the options:
insertAbove
or
insertBelow
.
Option Description
insertAbove Inserts the new rule above the specified rule
number. Then:
new rule's number = the specified rule number
insertBelow Inserts the new rule below the specified rule
number. Then:
new rule's number = the specified rule 1

<rule_number> is the number of the existing rule which you want to
insert the new rule above or below.
Modifying a Firewall Rule
Depending on what to modify in an existing rule, the command varies.

IPv4 commands
Modify an IPv4 rule's IP address and/or subnet mask:
config:# security ipAccessControl ipv4 rule modify <direction> <rule_number> ipMask
<ip_mask>
Modify an IPv4 rule's policy:
config:# security ipAccessControl ipv4 rule modify <direction> <rule_number> policy
<policy>
Modify all contents of an existing IPv4 rule: