Raritan PMC-1000, Руководство пользователя

Страница: 433 / 621

Chapter 5: Using the Command Line Interface
421
• <policy> is one of the options:
accept, drop or reject.
Option Description
accept Accepts traffic from all IP addresses.
drop Discards traffic from all IP addresses, without
sending any failure notification to the source host.
reject Discards traffic from all IP addresses, and an
ICMP message is sent to the source host for
failure notification.
Tip: You can combine both commands to modify all firewall control
parameters at a time. See
Multi-Command Syntax
(on page 504).
Managing Firewall Rules
You can add, delete or modify firewall rules using the CLI commands.
• An IPv4 firewall control rule command begins with
security
ipAccessControl ipv4 rule.
•
An IPv6 firewall control rule command begins with
security
ipAccessControl ipv6 rule.
Adding a Firewall Rule
Depending on where you want to add a new firewall rule in the list, the
command for adding a rule varies.
•
IPv4 commands
Add a new rule to the bottom of the IPv4 rules list:
config:# security ipAccessControl ipv4 rule add <direction> <ip_mask> <policy>
Add a new IPv4 rule by inserting it above or below a specific rule:
config:# security ipAccessControl ipv4 rule add <direction> <ip_mask> <policy>
<insert> <rule_number>
-- OR --