10 GbE Gateway
(sRB-20210G Module) User Manual
Version 2.0
193
Mellanox Technologies
service remove service remove [name|all]
service show service show
service update Dport service update Dport [row][Dport]
service update Sport service update Sport [row][Sport]
service update name service update name [row][name]
service update type service update type [row][protocol]
Following is the command list available in TFM mode.
rules add
Description:
Adds a TFM Rule.
If rules are defined, all arriving packets will be treated according to
these rules. However, if a packet does not match one of these rules it
will be dropped. Note that the rules are implemented on a priority basis:
if several rules apply to arriving packets, the rules with the lowest
index number will be applied. Up to 1,024 rules can be added.
Syntax:
rules add [row
[1..1000]][Source-ip,any][Source-ip-mask,any][Dest-ip,any
][Dest-ip-mask,any][Interface]
[Service,any][tunneling,discard] [log [no,1-15]]
Note that
Source-ip-mask
and
Dest-ip-mask
must be bitwise masks.
Example:
rules add 6 192.168.3.1 255.255.255.0 192.168.3.200 255.255.255.0 if0
any tunneling 3
In the above example, assume that a packet arrives at the sRB-20210G with source IP of
192.168.3.1
and destination IP of
192.168.3.200
. If there are no other TFM rules with a
higher priority (i.e., a lower index number), then this rule will be applied to the packet.
Therefore, the packet will be tunneled and log counter #3 will be incremented.
rules remove
Description:
Removes TFM rule(s).
Syntax:
rules remove [entry | all]
Example:
sRB-20210G-61f0(config-tfm)# rules remove all
rules show
Description:
Displays the TFM rules. Note that the sRB-20210G is configured by
default to work with a single bridge interface upon startup. For this
reason, a default rule exists under the TFM, which enables the bridge
to tunnel traffic in both ways. The interface name used under the
default rule is
if0.
For each additional interface, a corresponding
TFM rule will be created. To view these TFM rules, simply use the
rules show
command as detailed below.
