Siemens scalance WLC711 Reference Manual page 270

cos (named-cos| none)
traffic-mirror
Usage
If the specified rule position already contains a filter rule, specifying a rule using this command inserts a
rule in the specified position in the list and re-sequences all rules below this filter down by one position.
Use the command to insert or append a rule at the specified position.
create
Examples
The following example shows the default filter rules applied to the Auth role:
WLC.siemens.com
WLC.siemens.com
Enable AP filtering: disable
filter 1 (default) proto none 0.0.0.0
filter 2 (default) proto none 0.0.0.0
The following example creates a (basic mode) filter rule 1 that allows UDP traffic in both directions from
IP address 192.168.10.0/24 for ports 10 through 2000:
WLC.siemens.com
port 10 2000 in dst out src allow
WLC.siemens.com
WLC.siemens.com
Enable AP filtering: disable
filter 1 proto udp 192.168.10.0 255.255.255.0 port 10 2000 in dst out src
allow
filter 2 (default) proto none 0.0.0.0
filter 3 (default) proto none 0.0.0.0
The following example creates a filter rule 1 that is inserted into the rule list at position 1 resequencing
the current rule 1. This filter rule allows TCP traffic in both directions from IP address 192.168.0.0/16 for
ports 10 through 2000:
WLC.siemens.com
port 10 2000 in dst out src allow
WLC.siemens.com
Enable AP filtering: disable
filter 1 proto tcp 192.168.0.0 255.255.0.0 port 10 2000 in dst out src allow
filter 2 proto udp 192.168.10.0 255.255.255.0 port 10 2000 in dst out src
allow
filter 3 (default) proto none 0.0.0.0
filter 4 (default) proto none 0.0.0.0
SCALANCE WLC711 CLI Reference Guide
Specifies the class of service in the filter rule. The named-cos must already be
created by the create command in the cos context. Specifying none means
CoS is not used as matching criteria in the filter rule.
Specifies the behavior applied to a traffic mirror:
none specifies the filter rule is not configured for traffic mirror.
enable specifies that the traffic rule is enabled for traffic mirror
prohibited specifies that the traffic rule is prohibited for traffic mirror.
:vnsmode:Auth# create p6
:vnsmode:Auth# show p6 acfilter
:vnsmode:Auth:acfilters# create 1 proto udp 192.168.10.0/24
:vnsmode:Auth:acfilters# apply
:vnsmode:Auth:acfilters# show
:vnsmode:Auth:acfilters# create 1 proto tcp 192.168.0.0/16
:vnsmode:Auth:acfilters# show
VNS Commands (vnsmode)
all_ports in dst out none allow
all_ports in none out src allow
all_ports in dst out none allow
all_ports in none out src allow
all_ports in dst out none allow
all_ports in none out src allow
create
270