Iprule - D-Link NetDefend DFL-210 Cli Reference Manual

Network security firewall
Hide thumbs Also See for NetDefend DFL-210:
Table of Contents

Advertisement

3.23. IPRule

3.23. IPRule
Description
An IP rule specifies what action to perform on network traffic that matches the specified filter criter-
ia.
Properties
Index
Name
Action
SourceInterface
SourceNetwork
DestinationInterface
DestinationNetwork
Service
Schedule
NATAction
NATSenderAddress
SATTranslate
SATTranslateToIP
SATTranslateToPort
SATAllToOne
SLBStickiness
SLBIdleTimeOut
SLBMaxSlots
SLBNetSize
SLBMonitorPing
The index of the object, starting at 1. (Identifier)
Specifies a symbolic name for the rule. (Optional)
Reject, Drop, FwdFast, Allow, NAT, SAT or SLB_SAT.
Specifies the name of the receiving interface to be compared to
the received packet.
Specifies the sender span of IP addresses to be compared to the re-
ceived packet.
Specifies the the destination interface to be compared to the re-
ceived packet.
Specifies the span of IP addresses to be compared to the destina-
tion IP of the received packet.
Specifies a service that will be used as a filter parameter when
matching traffic with this rule.
By adding a schedule to a rule, the security gateway will only al-
low that rule to trigger at those designated times. (Optional)
Specify sender address or Use interface address. (Default: UseIn-
terfaceAddress)
Specifies which sender address will be used.
Specifies whether to translate source IP or destination IP.
(Default: DestinationIP)
Translate to this IP address.
Translate to this port. (Optional)
Rewrite all destination IPs to a single IP. (Default: No)
Specifies stickiness mode. (Default: None)
New connections that arrive within the idle timeout are assigned
to the same real server as previous connections from that address.
The timeout is refreshed after each new connection. (Default: 30)
Specifies maximum number of slots for IP and network stickiness.
(Default: 2048)
Specifies network size for network stickiness. (Default: 24)
Enable monitoring using ICMP Ping packets. (Default: No)
97
Chapter 3. Configuration Reference

Advertisement

Table of Contents
loading

Table of Contents