Chapter 8: Using the Command Line Interface
459
Adding a Role-Based Access Control Rule
Depending on where you want to add a new rule in the list, the command
syntax for adding a rule varies.
IPv4 commands
Add a new rule to the bottom of the IPv4 rules list:
config:#
security roleBasedAccessControl ipv4 rule add <start_ip> <end_ip> <role>
<policy>
Add a new IPv4 rule by inserting it above or below a specific rule:
config:#
security roleBasedAccessControl ipv4 rule add <start_ip> <end_ip> <role>
<policy> <insert> <rule_number>
IPv6 commands
Add a new rule to the bottom of the IPv6 rules list:
config:#
security roleBasedAccessControl ipv6 rule add <start_ip> <end_ip> <role>
<policy>
Add a new IPv6 rule by inserting it above or below a specific rule:
config:#
security roleBasedAccessControl ipv6 rule add <start_ip> <end_ip> <role>
<policy> <insert> <rule_number>
Variables:
<start_ip> is the starting IP address.
<end_ip> is the ending IP address.
<role> is the role for which you want to create an access control
rule.
<policy> is one of the options:
allow or deny.
Policy
Description
allow
Accepts traffic from the specified IP address
range when the user is a member of the specified
role
deny
Drops traffic from the specified IP address range
when the user is a member of the specified role
Summary of Contents for PX3-1000 series
Page 5: ......
Page 92: ...Chapter 4 Connecting External Equipment Optional 70...
Page 668: ...Appendix J RADIUS Configuration Illustration 646 Note If your PX3 uses PAP then select PAP...
Page 673: ...Appendix J RADIUS Configuration Illustration 651 14 The new attribute is added Click OK...
Page 674: ...Appendix J RADIUS Configuration Illustration 652 15 Click Next to continue...