Siemens scalance WLC711, Справочное руководство

Страница: 271 / 417

The following example creates a filter rule for ToS-DSCP B8/FF and CoS Best Effort (note quotes
around the named CoS because of the space):
WLC.siemens.com
:vnsmode:Auth:acfilters# create proto udp 192.168.0.0/32 in
dst out src none priority none tos-dscp B8/FF cos “Best Effort”
config
Use the
config
command to modify an existing AP or AC filter rule for this <named-role>. The
config
command is accessible from within the vnsmode:<default-role>:acfilters and vnsmode:<default-
role>:apfilters contexts.
config [pos] proto protocol eth ether-type mac MAC address (ipaddress/mask |
interface-subnet | interface-ip | any) [(port port [port]) | (type-code type
[type])] in (none|src|dst|both) out (none|src|dst|both) (allow | deny | none |
contain2vlan vlan-id) priority (0-7 | none) tos-dscp (0-FF/(FF|FE|FC|F8|F0|E0|C0|
80)|none) cos (named cos|none) traffic-mirror (none) | enable | prohibited)
Parameters
pos
Specifies a position value for this filter in the filter list. Valid values are from 0 -
255.
proto protocol
Specifies the protocol for this filter rule by number or name. Valid number values
are from 0 - 255. Valid name values are:
•
udp - UDP protocol
•
tcp - TCP protocol
•
ah - Authentication Header protocol
•
esp - Encapsulating Security Payload protocol
•
any- Any protocol
•
icmp - ICMP protocol
•
gre - Generic Route Encapsulation protocol
•
0-255 - number value of protocol
eth ether-type ether-type
: 4 hex digits from 0001~FFFF, or any.
The following well known values are converted into hex values,
IPv4,ARP,RARP,DECnet Phase IV,AppleTalk (EtherTalk), AppleTalk Address
Resolution Protocol (AARP), Novell IPX (alt), Novell, Profinet, and IPv6.
On the controller the Ethertype=IPv6 rule is ignored. The controller always drops
IPv6 traffic. The rule is applied on Bridged At AP topologies.
mac MAC address MAC address
: MAC or CIDR address, or any.
ipaddress/mask
interface-subnet
interface-ip
any
Specifies an IP address and/or mask for this filter rule.
Specifies that the IP address and mask configured for the associated topology is
used for this filter rule.
Specifies the IP address of the associated topology used for this filter rule.
Specifies that any IP address or mask applies for this filter rule.
port port
[
port
] Specifies a TCP or UDP port or port range to which this filter rule will be applied.
The first <port> value specifies either the port or the start of a port range. The
second <port> value optionally specifies the end of a range. This parameter is
valid only when either TCP or UDP is the specified protocol. Valid port values are
from 0 - 65535.
VNS Commands (vnsmode)
config
SCALANCE WLC711 CLI Reference Guide 271