Ju
ne
20
18
Legrand PDU User Guide 335
config:#
security roleBasedAccessControl ipv6 rule add <start_ip> <end_ip> <role>
<policy> <insert> <rule_number>
Variables:
<start_ip> is the starting IP address.
<end_ip> is the ending IP address.
<role> is the role for which you want to create an access control rule.
<policy> is one of the options:
allow
or
deny
.
Policy
Description
allow
Accepts traffic from the specified IP address
range when the user is a member of the specified
role
deny
Drops traffic from the specified IP address range
when the user is a member of the specified role
<insert> is one of the options:
insertAbove
or
insertBelow
.
Option
Description
insertAbove
Inserts the new rule above the specified rule
number. Then:
new rule's number = the specified rule number
insertBelow
Inserts the new rule below the specified rule
number. Then:
new rule's number = the specified rule 1
<rule_number> is the number of the existing rule which you want to insert the new rule above or below.
Modifying a Role-Based Access Control Rule
Depending on what to modify in an existing rule, the command syntax varies.
IPv4 commands
Modify a rule's IPv4 address range:
config:#
security roleBasedAccessControl ipv4 rule modify <rule_number>
startIpAddress <start_ip> endIpAddress <end_ip>
Modify an IPv4 rule's role:
config:#
security roleBasedAccessControl ipv4 rule modify <rule_number> role <role>
Modify an IPv4 rule's policy:
config:#
security roleBasedAccessControl ipv4 rule modify <rule_number> policy
<policy>
Modify all contents of an existing IPv4 rule:
