Siemens scalance WLC711 Reference Manual page 269

eth ether-type
mac MAC address
ipaddress/mask
interface-subnet
interface-ip
any
port port [ port]
type-code type [ type]
in (none|src|dst|both)
out (none|src|dst|both)
allow | deny | none |
contain2vlan vlan-id
priority (0-7 | none)
tos-dscp (tos-dscp
value/mask value |
none)
SCALANCE WLC711 CLI Reference Guide
ether-type: 4 hex digits from 0001~FFFF, or any.
The following well known values are converted into hex values,
IPv4,ARP,RARP,DECnet Phase IV,AppleTalk (EtherTalk), AppleTalk Address
Resolution Protocol (AARP), Novell IPX (alt), Novell, Profinet, and IPv6.
On the controller the Ethertype=IPv6 rule is ignored. The controller always drops
IPv6 traffic. The rule is applied on Bridged At AP topologies.
MAC address: MAC or CIDR address, or any.
Specifies an IP address and/or mask for this filter rule.
Specifies that the IP address and mask configured for the associated topology is
used for this filter rule.
Specifies the IP address of the associated topology used for this filter rule.
Specifies that any IP address or mask applies for this filter rule.
Specifies a TCP or UDP port or port range to which this filter rule will be applied.
The first <port> value specifies either the port or the start of a port range. The
second <port> value optionally specifies the end of a range. This parameter is
valid only when either TCP or UDP is the specified protocol. Valid port values are
from 0 - 65535.
Specifies an ICMP type code or range of ICMP type codes. The first type value
specifies either the ICMP type code or the start of a type code range. The second
type value optionally specifies the end of a type code range. This parameter is
valid only when ICMP is the specified protocol. Valid type values are from 0 -
255.
Specifies the direction of packet flow. — in specifies a packet flow from the AP to
the AC.
none specifies that the in direction will not be used as matching criteria in the filter
rule.
dst specifies that the IP address for this filter rule is the destination of the packet
flow.
src specifies that the IP address for this filter rule is the source of the packet flow.
both specifies that the IP address for this filter rule can be either source or
destination.
Specifies the direction of packet flow. — out specifies a packet flow from the AC
to the AP.
none specifies that the out direction will not be used as matching criteria in the
filter rule.
dst specifies that the IP address for this filter rule is the destination of the packet
flow.
src specifies that the IP address for this filter rule is the source of the packet flow.
both specifies that the IP address for this filter rule can be either source or
destination.
Specifies whether packets are allowed or denied (or ignored), or put in the
containment VLAN (you must specify the VLAN by its ID) when meeting the
criteria specified in the filter rule.
Specifies the packet priority. Valid values are 0-7; the highest priority is 7.
Specifying none means priority level will not be used as matching criteria in this
CoS.
Specifies the type of service in the filter rule. Valid values are 0-FF for ToS/DSCP
and FF|FE|FC|F8|F0|E0|C0|80 for mask. Specifying none means tos/dscp value is
not used as matching criteria in the filter rule.
VNS Commands (vnsmode)
create
269