Siemens scalance WLC711 Reference Manual page 271

The following example creates a filter rule for ToS-DSCP B8/FF and CoS Best Effort (note quotes
around the named CoS because of the space):
WLC.siemens.com
dst out src none priority none tos-dscp B8/FF cos "Best Effort"
config
Use the command to modify an existing AP or AC filter rule for this <named-role>. The
config
command is accessible from within the vnsmode:<default-role>:acfilters and vnsmode:<default-
role>:apfilters contexts.
config [pos] proto protocol eth ether-type mac MAC address (ipaddress/mask |
interface-subnet | interface-ip | any) [(port port [port]) | (type-code type
[type])] in (none|src|dst|both) out (none|src|dst|both) (allow | deny | none |
contain2vlan vlan-id) priority (0-7 | none) tos-dscp (0-FF/(FF|FE|FC|F8|F0|E0|C0|
80)|none) cos (named cos|none) traffic-mirror (none) | enable | prohibited)
Parameters
pos
proto protocol
eth ether-type
mac MAC address
ipaddress/mask
interface-subnet
interface-ip
any
port port [ port]
SCALANCE WLC711 CLI Reference Guide
:vnsmode:Auth:acfilters# create proto udp 192.168.0.0/32 in
Specifies a position value for this filter in the filter list. Valid values are from 0 -
255.
Specifies the protocol for this filter rule by number or name. Valid number values
are from 0 - 255. Valid name values are:
•
udp - UDP protocol
•
tcp - TCP protocol
•
ah - Authentication Header protocol
•
esp - Encapsulating Security Payload protocol
•
any- Any protocol
•
icmp - ICMP protocol
•
gre - Generic Route Encapsulation protocol
•
0-255 - number value of protocol
ether-type: 4 hex digits from 0001~FFFF, or any.
The following well known values are converted into hex values,
IPv4,ARP,RARP,DECnet Phase IV,AppleTalk (EtherTalk), AppleTalk Address
Resolution Protocol (AARP), Novell IPX (alt), Novell, Profinet, and IPv6.
On the controller the Ethertype=IPv6 rule is ignored. The controller always drops
IPv6 traffic. The rule is applied on Bridged At AP topologies.
MAC address: MAC or CIDR address, or any.
Specifies an IP address and/or mask for this filter rule.
Specifies that the IP address and mask configured for the associated topology is
used for this filter rule.
Specifies the IP address of the associated topology used for this filter rule.
Specifies that any IP address or mask applies for this filter rule.
Specifies a TCP or UDP port or port range to which this filter rule will be applied.
The first <port> value specifies either the port or the start of a port range. The
second <port> value optionally specifies the end of a range. This parameter is
valid only when either TCP or UDP is the specified protocol. Valid port values are
from 0 - 65535.
VNS Commands (vnsmode)
config
config
271