THOMSON SpeedTouch 608, Cli Reference Manual

Page: 298 / 490

296
IPSec Commands
E-DOC-CTC-20040216-0002 v1.0
ipsec policy rule create
Create a rule.
Note
If a value is preceded by a “!”, it means "NOT".
E.g. "srcport=!80" means "if srcport is different from 80".
SYNTAX:
where:
policy rule create chain = <chain name>
[index = <number>]
[srcintf [!]= <string>]
[src [!]= <ip-range>]
[dst [!]= <ip-range>]
[tos [!]= <number{1-255}>]
[precedence [!]= <number{0-7}>]
[dscp [!]= <number{0-63}>]
[prot [!]= <{<supported IP protocol name>|<number>}]
[srcport [!]= <{<supported TCP/UDP port name>|<number>}>]
[srcportend = <{<supported TCP/UDP port name>|<number>}>]
[dstport [!]= <{<supported TCP/UDP port name>|<number>}>]
[dstportend = <{<supported TCP/UDP port name>|<number>}>]
[clink = <chain name>]
[log = <{no|yes}>]
policy = <Connection Profile Name>
chain The name of the chain in which the rule must be inserted. REQUIRED
index The number of the rule before which the new rule must be added. OPTIONAL
srcintf The name of the interface the packet should [or should NOT] arrive
on to make this rule apply.
(NOT applicable if used in a chain assigned to the output hook) OPTIONAL
src The source IP address (range) the packet should [or should NOT]
come from. (Supports cidr notation). OPTIONAL
dst The destination IP address (range) the packet should [or should
NOT] be going to. (Supports cidr notation). OPTIONAL
tos A number between 0 and 255.
Represents the Type Of Service (TOS) specification expected [or
NOT expected] in the IP packet. OPTIONAL
precedence A number between 0 and 7.
Represents the precedence in the IP packet (part of tos). OPTIONAL
dscp A number between 0 and 63.
Represents the DSCP in the IP packet (part of tos). OPTIONAL