Set - Motorola WS2000 - Wireless Switch - Network Management Device Cli Reference Manual

3-72 WS2000 Wireless Switch System Reference Guide
3.14.6 Network Firewall Policy Inbound set Command

set

Network Firewall Policy Inbound Commands
Sets inbound firewall policy parameters.
Syntax
set [saddr|daddr|tp|sport}dport|rnat|rport|action|logging]
Parameters
saddr <idx> <Ip Addr>
<netmask>
daddr <idx> <Ip Addr>
<netmask>
tp <idx> <tp>
sport <idx> <port1>
[<port2>]
dport <idx> <port1>
[<port2>]
rnat <idx> <Ip Addr>
rport <idx> <rport>
action <idx> [allow|deny] Sets action of inbound firewall policy <idx> to
Example
admin(network.fw.policy.inb)>set tp 1 gre
admin(network.fw.policy.inb)>list
-------------------------------------------------------------------------
Idx Src IP-Netmask
-------------------------------------------------------------------------
1 209.239.160.202- 168.192.36.4-
255.255.255.224
admin(network.fw.policy.inb)>set sport 1 20 21
admin(network.fw.policy.inb)>set dport 1 200 201
admin(network.fw.policy.inb)>set action 1 allow
admin(network.fw.policy.inb)>list
-------------------------------------------------------------------------
Idx Src IP-Netmask
-------------------------------------------------------------------------
1 209.239.160.202- 168.192.36.4-
255.255.255.224
Sets source IP address <Ip Addr> and IP netmask <netmask> for inbound
firewall policy <idx>.
Sets destination IP address <Ip Addr> and IP netmask <netmask> for
inbound firewall policy <idx>.
Sets transport protocol for inbound firewall policy <idx> to <tp> (one of all,
tcp, udp, icmp, ah, esp, gre).
Sets source port range for inbound firewall policy <idx> from <port1>
(1–65535) to <port2> (1–65535). If <port2> is not specified, <port1> is used
as the top end of the range.
Sets destination port range for inbound firewall policy <idx> from <port1> (1–
65535) to <port2> (1–65535). If <port2> is not specified, <port1> is used as
the top end of the range.
Sets reverse NAT IP address for inbound firewall policy <idx> to
< > (a.b.c.d).
Ip Addr
Sets reverse NAT port for inbound firewall policy <idx> to <rport>
(0–65535).
Dst IP-Netmask Tp SPorts DPorts Rev. NAT
gre 1:
255.255.255.0
Dst IP-Netmask Tp SPorts DPorts Rev. NAT
gre 20:21 200:
255.255.255.0
allow or deny.
1: 0.0.0.0
65535 65535 nat port 0
0.0.0.0
201 nat port 0
Action
deny
Action
allow