Table of Contents
Advertisement
-l [VALUE]
- p [VALUE]
E
x
a
m
p
l
E
x
a
m
p
> ipf set -c 1 #set call filter start from set 1
Setting saved.
> ipf set -v
Call Filter: Enable (Start Filter Set = 1)
Data Filter: Enable (Start Filter Set = 2)
Log Flag
Actions for packet not matching any rule:
Pass or Block
Content Management: None
Apply IP filter to VPN incoming packets
Accept large incoming fragmented UDP or ICMP packets: Enable
>
T
e
l
n
e
t
C
o
m
m
T
e
l
n
e
t
C
o
m
m
This command is used to set and view flowtrack sessions.
S
y
n
t
a
x
S
y
n
t
a
x
ipf flowtrack set [-r]
ipf flowtrack view [-f]
S
y
n
t
a
x
S
y
n
t
a
x
Parameter
-r
-t [value]
-f
E
x
a
m
p
l
E
x
a
m
p
Vigor122 User's Guide
number you can type is "0" to "12" (0 means "disable).
It means to setup Log Flag, e.g., -l 2
Type "0" to disable the log flag.
Type "1" to display the log of passed packet.
Type "2" to display the log of blocked packet.
Type "3" to display the log of non-matching packet.
It means to setup actions for packet not matching any rule, e.g., -p
1
Type "0" to let all the packets pass;
Type "1" to block all the packets.
e
l
e
: None
: Pass
a
n
d
:
i
p
f
f
l
o
w
t
r
a
c
a
n
d
:
i
p
f
f
l
o
w
t
r
a
c
D
e
s
c
r
i
p
t
i
o
n
D
e
s
c
r
i
p
t
i
o
n
Description
It means to refresh the flowtrack.
It means to specify a protocol (e.g., -t tcp).
Available settings include:
tcp
udp
icmp
It means to show the sessions state of flowtrack. If you do not
specify any IP address, then all the session state of flowtrack will be
displayed.
e
l
e
k
k
: Disable
117
Advertisement
Table of Contents
