Chapter 4: Using the Command Line Interface
156
•
IPv4 commands
Modify an IPv4 rule's IP address and/or subnet mask:
config:#
security ipAccessControl ipv4 rule modify <direction> <rule_number> ipMask
<ip_mask>
Modify an IPv4 rule's policy:
config:#
security ipAccessControl ipv4 rule modify <direction> <rule_number> policy
<policy>
Modify all contents of an existing IPv4 rule:
config:#
security ipAccessControl ipv4 rule modify <direction> <rule_number> ipMask
<ip_mask> policy <policy>
•
IPv6 commands
Modify an IPv6 rule's IP address and/or prefix length:
config:#
security ipAccessControl ipv6 rule modify <direction> <rule_number> ipMask
<ip_mask>
Modify an IPv6 rule's policy:
config:#
security ipAccessControl ipv6 rule modify <direction> <rule_number> policy
<policy>
Modify all contents of an IPv6 existing rule:
config:#
security ipAccessControl ipv6 rule modify <direction> <rule_number> ipMask
<ip_mask> policy <policy>
Variables:
•
<direction> is one of the options:
in
or
out
.
Direction
Description
in
Inbound traffic.
out
Outbound traffic.
•
<rule_number> is the number of the existing rule that you want to modify.
•
<ip_mask> is the combination of the IP address and subnet mask values (or prefix length), which are separated with a
slash. For example, an IPv4 combination looks like this:
192.168.94.222/24
.
•
<policy> is one of the options:
accept,
drop
or
reject
.