Fujitsu SPARC Enterprise M3000 Xscf Reference Manual page 271

For xcp version 1110
Hide thumbs Also See for SPARC Enterprise M3000:
Table of Contents

Advertisement

If a message indicates that the XSCF must be reset, do so using the
rebootxscf(8) command. .
Use the showpacketfilters(8) command to display the current IP packet
filtering rules.
EXAMPLES
EXAMPLE 1
XSCF> setpacketfilters -c add -s 10.10.10.10 -j DROP
-s 10.10.10.10/255.255.255.255 -j DROP
NOTE: applied IP packet filtering rules.
Continue? [y|n] :y
XSCF>
EXAMPLE 2
XSCF> setpacketfilters -c add -s 192.168.100.0/255.255.255.0 -i \
xscf#0-lan#0 -j ACCEPT
-s 192.168.100.0/255.255.255.0 -i xscf#0-lan#0 -j ACCEPT
NOTE: applied IP packet filtering rules.
Continue? [y|n] :y
XSCF> setpacketfilters -c add -i xscf#0-lan#0 -j DROP
-s 192.168.100.0/255.255.255.0 -i xscf#0-lan#0 -j ACCEPT
-i xscf#0-lan#0 -j DROP
NOTE: applied IP packet filtering rules.
Continue? [y|n] :y
XSCF>
EXAMPLE 3
XSCF> showpacketfilters -a
-s 172.16.0.0/255.255.0.0 -i xscf#0-lan#0 -j DROP
-s 10.10.10.10/255.255.255.255 -j DROP
XSCF>
XSCF> setpacketfilters -c del -s 10.10.10.10 -j DROP
-s 172.16.0.0/255.255.0.0 -i xscf#0-lan#0 -j DROP
NOTE: applied IP packet filtering rules.
Continue? [y|n] :y
XSCF>
EXAMPLE 4
XSCF> setpacketfilters -c clear
(none)
Drops the IP packet sent from the IP address 10.10.10.10.
On M3000/M4000/M5000 servers, communication to xscf#0-lan#0
exclusively accepts those IP packets sent from the 192.168.100.0/
255.255.255.0 network.
Deletes the IP packet drop setting which has been set in the IP address
10.10.10.10..
Clears all IP packet filtering rules which have been set.
setpacketfilters(8)
System Administration
257

Advertisement

Table of Contents
loading

Table of Contents