LEGRAND 1U, Руководство пользователя

Страница: 350 / 543

Janu
ary 201
9
350 Legrand PDU User Guide
Option Description
drop Discards traffic from all IP addresses, without
sending any failure notification to the source host.
reject Discards traffic from all IP addresses, and an
ICMP message is sent to the source host for
failure notification.
Tip: You can combine both commands to modify all firewall control parameters at a time. See
Multi-Command Syntax (on page 408).
Managing Firewall Rules
You can add, delete or modify firewall rules using the CLI commands.

An IPv4 firewall control rule command begins with
security ipAccessControl ipv4 rule
.

An IPv6 firewall control rule command begins with
security ipAccessControl ipv6 rule
.
Adding a Firewall Rule
Depending on where you want to add a new firewall rule in the list, the command for adding a rule varies.

IPv4 commands

Add a new rule to the bottom of the IPv4 rules list:
config:# security ipAccessControl ipv4 rule add <direction> <ip_mask> <policy>

Add a new IPv4 rule by inserting it above or below a specific rule:
config:# security ipAccessControl ipv4 rule add <direction> <ip_mask> <policy> <insert>
<rule_number>
-- OR --
config:# security ipAccessControl ipv4 rule add <direction> <insert> <rule_number>
<ip_mask> <policy>

IPv6 commands

Add a new rule to the bottom of the IPv6 rules list:
config:# security ipAccessControl ipv6 rule add <direction> <ip_mask> <policy>

Add a new IPv6 rule by inserting it above or below a specific rule:
config:# security ipAccessControl ipv6 rule add <direction> <ip_mask> <policy> <insert>
<rule_number>
-- OR --