Draytek Vigor2133 Vac, Руководство пользователя

Страница: 555 / 706

Vigor2133 Series User’s Guide 543
T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p f f s s e e t t
This command is used to set general rule for firewall.
S
S
y
y
n
n
t
t
a
a
x
x
ipf set [Options]
ipf set [SET_NO] rule [RULE_NO] [Options]
S
S
y
y
n
n
t
t
a
a
x
x
D
D
e
e
s
s
c
c
r
r
i
i
p
p
t
t
i
i
o
o
n
n
Parameter Description
Options There are several options provided here, such as -v, -c [SET_NO], -d
[SET_NO],… and etc.
SET_NO It means to specify the index number (from 1 to 12) of filter set.
RULE_NO It means to specify the index number (from 1 to 7) of filter rule set.
-v Type “-v” to view the configuration of general set.
-c [SET_NO] It means to setup Call Filter, e.g., -c 2. The range for the index
number you can type is “0” to “12” (0 means “disable).
-d [SET_NO] It means to setup Data Filter, e.g., -d 3 . The range for the index
number you can type is “0” to “12” (0 means “disable).
-l [VALUE] It means to setup Log Flag, e.g., -l 2
Type “0” to disable the log flag.
Type “1” to display the log of passed packet.
Type “2” to display the log of blocked packet.
Type “3” to display the log of non-matching packet.
- p [VALUE] It means to setup actions for packet not matching any rule, e.g., -p
1
Type “0” to let all the packets pass;
Type “1” to block all the packets.
-R [v4/v6][Enable/Disable] : Accept routing packet from WAN
-L [VALUE] It means to enable/disable Strict Security Firewall.
0:Disable, 1:Enable
-C [VALUE] It means to set code page.
code page number ('?' for more information).
-M [APPE_NO] It means to set APPE for packets not matching any rule.
-U [URL_NO] It means to set URL Content Filter for packets not matching any
rule.
-W [WEB_NO] It means to set WEB Content Filter for packets not matching any
rule.
-D [DNS_NO] It means to set DNS Filter for packet not matching any rule.
-g [VALUE] It means to set DNS Filter syslog.
0:Disable 1:Enable
-a [AD_SET] It means to configure the advanced settings.
-f [VALUE] It means to accept large incoming fragmented UDP or ICMP packets.
0:Disable, 1:Enable
-t [VALUE] It means to enable Transparent Mode.
-E [VALUE] It means to set the session limitation max count.
VALUE : 0-32000
-Q [VALUE] It means to set the QoS class.