Ip Filterset Configuration Commands - Netopia CLI 874 Cli Reference Manual

index: 1 = primary server; 2 = alternate server
host: IP address or DNS hostname of server
secret: RADIUS or TACACS+ shared secret
tacacs-plus accounting [ yes | no ]
This command enables or disables TACACS+ accounting.
IP Filterset Configuration Commands
Note:
Beginning with firmware version 8.2, the force-route and force-route-gateway attributes have been
added for policy-based routing, and the tos and tos-mask attibutes have been added for TOS field matching.
ip filterset fs-tag {in | out} [filter] filter-id [enable {yes | no}]
[forward {yes | no} | [ force-route {yes | no ] force-route-gateway ip-addr}]]
[{ call-placement | idle-reset } { no-change | disabled }]
[source { ip-addr/mask-bits | ip-addr mask }]
[destination { ip-addr/mask-bits | ip-addr mask }]
[ tos { tos_value tos-mask tos_mask_value } |
[ protocol { 1..65535 |
any |
gre |
{ {tcp | 6 } [{source port-compare}] [{destination port-compare}]
{ {udp | 17 } [{source port-compare}] [{destination port-compare}]} |
{ {icmp | 1 } [{type port-compare}] [{code port-compare}]} } ]
no ip filterset fs-id [{in | out} [filter-id ]]
show ip filterset fs-id [{in | out} [filter-id ]]
The CLI for filters is fairly complex. More explanation follows the command itself.
compare-op = { nc | ne | <> | lt | < | le | <= | eq | = | ge | >= | gt | > }
port-compare = { nc | { compare-op digits } }
filter-id = { 1..255 | new | last }
IP Filterset Configuration Commands
[established | all] } |
Motorola Netopia® Router CLI Commands 2-121