Siemens scalance WLC711 Reference Manual page 361

in (none|src|dst|both)
(allow|deny)
Usage
If the specified exception filter position already contains an exception filter, the
overwrites the existing exception filter. Use the
filter at the specified position.
Example
The following example modifies an existing filter:
WLC.siemens.com
port 80 in dst allow
create
Use the command to create an exception filter. The
create
topology:<named-topology>:l3:exception context of the CLI for b@ac, physical, and routed topologies.
create pos proto {udp|tcp|ah|esp|none|icmp|gre|0-255} A.B.C.D/0-32 [(port
0-65535[ 0-65535])|(type 0-255 [0-255])] in (none|src|dst|both) (allow|deny)
Parameters
pos
proto {udp|tcp|ah|esp|none |
icmp|gre|0-255}
A.B.C.D/0-32
SCALANCE WLC711 CLI Reference Guide
Specifies the direction of packet flow — in specifies a packet flow from the
AP to the AC.
none specifies that the in direction will not be used as matching criteria in
the filter rule.
dst specifies that the IP address for this filter rule is the destination of the
packet flow.
src specifies that the IP address for this filter rule is the source of the packet
flow.
both specifies that the IP address for this filter rule can be either source or
destination.
Specifies whether packets will be allowed or denied when meeting the
criteria specified in the filter rule.
create
:topology:r1:l3:exceptions# config 2 proto tcp 1.1.1.1/32
Specifies a position value for this filter in the filter list. Valid values are from
0–255.
Specifies the protocol for this filter rule by number or name. Valid number
values are from 0–255. Valid name values are:
•
udp - UDP protocol
•
tcp - TCP protocol
•
ah - Authentication Header protocol
•
esp - Encapsulating Security Payload protocol
•
none - No protocols
•
icmp - ICMP protocol
•
gre - Generic Route Encapsulation protocol
Specifies the IPv4 IP address and mask.
topology Commands
config
command to insert or append an exception
command is available from the
create
create
command
361