Siemens scalance WLC711 Reference Manual page 272

type-code type [ type]
in (none|src|dst|both)
out (none|src|dst|both)
allow | deny | none |
contain2vlan vlan-id
priority (0-7 | none)
tos-dscp (tos-dscp
value/mask value |
none)
cos (named-cos| none)
traffic-mirror
Usage
If the specified rule position already contains a filter rule, the
rule. Use the
create
Examples
The following example overwrites a pre-existing filter rule 1 with a rule that allows ICMP traffic types 9
through 31 in both directions for the associated topology's interface subnet and mask:
WLC.siemens.com
type 9 31 in dst out src allow
SCALANCE WLC711 CLI Reference Guide
Specifies an ICMP type code or range of ICMP type codes. The first type value
specifies either the ICMP type code or the start of a type code range. The second
type value optionally specifies the end of a type code range. This parameter is
valid only when ICMP is the specified protocol. Valid type values are from 0 -
255.
Specifies the direction of packet flow. — in specifies a packet flow from the AP to
the AC.
none specifies that the in direction will not be used as matching criteria in the filter
rule.
dst specifies that the IP address for this filter rule is the destination of the packet
flow.
src specifies that the IP address for this filter rule is the source of the packet flow.
both specifies that the IP address for this filter rule can be either source or
destination.
Specifies the direction of packet flow. — out specifies a packet flow from the AC
to the AP.
none specifies that the out direction will not be used as matching criteria in the
filter rule.
dst specifies that the IP address for this filter rule is the destination of the packet
flow.
src specifies that the IP address for this filter rule is the source of the packet flow.
both specifies that the IP address for this filter rule can be either source or
destination.
Specifies whether packets are allowed or denied (or ignored), or put in the
containment VLAN (you must specify the VLAN by its ID) when meeting the
criteria specified in the filter rule.
Specifies the packet priority. Valid values are 0-7; the highest priority is 7.
Specifying none means priority level will not be used as matching criteria in this
CoS.
Specifies the type of service in the filter rule. Valid values are 0-FF for ToS/DSCP
and FF|FE|FC|F8|F0|E0|C0|80 for mask. Specifying none means tos/dscp value is
not used as matching criteria in the filter rule.
Specifies the class of service in the filter rule. The named-cos must already be
created by the create command in the cos context. Specifying none means
CoS is not used as matching criteria in the filter rule.
Specifies the behavior applied to a traffic mirror:
none specifies the filter rule is not configured for traffic mirror.
enable specifies that the traffic rule is enabled for traffic mirror
prohibited specifies that the traffic rule is prohibited for traffic mirror.
command to insert or append a rule at the specified position.
:vnsmode:p1:acfilters# config 1 proto icmp interface-subnet
VNS Commands (vnsmode)
command overwrites the existing
config
config
272