Draytek Vigor2762 series, Руководство пользователя

Страница: 517 / 651

-r It means to show the running call and data filter rules.
-t It means to display all the information at one time.
-z It means to clear a filter rule’s statistics.
-Z It means to clear IP filter’s gross statistics.
Example
Example
> ipf view -V -c -d
ipf: IP Filter: v3.3.1 (1824)
Kernel: IP Filter: v3.3.1
Running: yes
Log Flags: 0x80947278 = nonip
Default: pass all, Logging: available
Telnet Command:
Telnet Command:
ipf set
ipf set
This command is used to set general rule for firewall.
ipf set [Options]
ipf set [SET_NO] rule [RULE_NO] [Options]
Syntax Description Syntax Description
Parameter Description
Options There are several options provided here, such as -v , -c [SET_NO], -
d [SET_NO],… and etc.
SET_NO It means to specify the index number (from 1 to 12) of filter set.
RULE_NO It means to specify the index number (from 1 to 7) of filter rule
set.
-v Type “-v” to view the configuration of general set.
-c [SET_NO] It means to setup Call Filter, e.g., -c 2 . The range for the index
number you can type is “0” to “12” (0 means “disable).
-d [SET_NO] It means to setup Data Filter, e.g., -d 3 . The range for the index
number you can type is “0” to “12” (0 means “disable).
-l [VALUE] It means to setup Log Flag, e.g., -l 2
Type “0” to disable the log flag.
Type “1” to display the log of passed packet.
Type “2” to display the log of blocked packet.
Type “3” to display the log of non-matching packet.
- p [VALUE] It means to setup actions for packet not matching any rule, e.g., -
p 1
Type “0” to let all the packets pass;
Type “1” to block all the packets.
-R [v4/v6] [Enable/Disable] Accept routing packet from WAN., e.g.,
-
R v4 0 : Set Accept routing packet from WAN by IPv4 is enable
-R v4 1 : Set Accept routing packet from WAN by IPv6 is disable
-R v6 0 : Set Accept routing packet from WAN by IPv4 is enable
-R v6 1 : Set Accept routing packet from WAN by IPv6 is disable
-L [VALUE] Enable/Disable Strict Security Firewall, e.g., -L 1 .
0:Disable, 1:Enable
-C [VALUE] Setup the code page, e.g., -C 12 .
Type 1 ~ 12 as the code page number. If “0” is set, the code page
Vigor2762 Series User’s Guide 507