Netopia CLI 874, Справочное руководство CLI

Страница: 134 / 207

2-122 Command Line Interface Commands Reference
ip filterset fs-tag { in | out } [ filter ] filter-id [ enable { yes | no }]
[ forward { yes | no } | [ force-route { yes | no ] force-route-gateway ip-addr }]
[{ call-placement | idle-reset } { no-change | disabled }]
[ source { ip-addr / mask-bits | ip-addr mask }]
[ destination { ip-addr / mask-bits | ip-addr mask }]
[ tos { tos_value tos-mask tos_mask_value } |
[ protocol { 1..65535 |
any |
gre |
{ { tcp | 6 } [{ source por t-compare }] [{ destination por t-compare }]
[ established | all ] } |
{ { udp | 17 } [{ source por t-compare }] [{ destination por t-compare }]} |
{ { icmp | 1 } [{ type por t-compare }] [{ code por t-compare }]} } ]
no ip filterset fs-id [{ in | out } [ filter-id ]]
show ip filterset fs-id [{ in | out } [ filter-id ]]
set
A Filter set, as with NAT Ser ver and Rule Lists, is instantiated by creating its first contained object. This first
filter can be identified by its ones-based index, 1, or with the special
new keyword. Subsequent modifications to
this filter, assuming no more filters have been added to the filter set yet, must be done by referring to the filter
either by id (1), or by the other special keyword
last . Subsequent filters can be added using either new or by the
next integer filter id. You can always specify the last filter in the set by using last . It is an error to attempt to
create a new filter whose id is not 1 greater than the id of the last filter.
Using new and last allow you to create filter sets without using filter indices.
show
You can show the contents of all filter sets by typing:
show ip filterset
Or you can show the contents of a filter set by typing (for example):
show ip filterset "My Filters"
Or all of the input or output filters of a filter set by adding the {in | out} keyword:
show ip filterset "My Filters" in
Or a par ticular filter by specifying {in | out} and the tag:
show ip filterset "My Filters" in 3
Since the command line console is currently constrained to 78 characters per line, the show command breaks
each filter up into four separate lines, for example:
show ip filterset "Basic Firewall" in 2
ip filterset "Basic Firewall" in 2 enable yes forward no
ip filterset "Basic Firewall" in 2 source 0.0.0.0/0
ip filterset "Basic Firewall" in 2 destination 0.0.0.0/0