Table of Contents
Advertisement
Example:
$ create filter subrule arp ruleid 1 subruleid 2 opcode request srcmacaddrfrom
00:01:02:03:04:05 srcmacaddrto 00:01:02:03:04:10 dstmacaddrfrom
00:02:03:04:05:11 dstmacaddrto 00:02:03:04:05:15 srcipaddrfrom 172.25.1.125
srcipaddrto 172.25.5.125 dstipaddrfrom 172.25.6.125 dstipaddrto 172.25.10.125
srcmacaddrcmp inrange dstmacaddrcmp exrange srcipaddrcmp inrange
dstipaddrcmp exrange ipsrcaddrmask 0xffff0000 ipdstaddrmask 0xffff0000
subruleprio high
Output:
Verbose Mode On
Entry Created
Rule Id
Opcode
Start Src Mac Addr : 00:01:02:03:04:05 End Src Mac Addr : 00:01:02:03:04:10
Start Dest Mac Addr : 00:02:03:04:05:11 End Dest Mac Addr : 00:02:03:04:05:15
Start Src Ip Addr
Start Dest Ip Addr : 172.25.6.125
Src Mac Addr Cmp
Dest Mac Addr Cmp
Src Ip Addr Cmp
Dest Ip Addr Cmp
Ip Src Addr Mask
Ip Dest Addr Mask
Subrule Prio
Verbose Mode Off:
Entry Created
Parameters
Name
Rule Id
Subrule Id
Opcode
402
: 1
: request
: 172.25.1.125
: inrange
: exrange
: inrange
: exrange
: 0xffff0000
: 0xffff0000
: high
Description
Unique identifier of a filter rule of which this sub rule is being
created.
Unique identifier of a filter subrule.
The opcode identifies whether the packet is ARP request or reply.
This field specifies the type of packets on which the subrule is to
be applied. If 'any' is specified, both request and reply packets are
filtered.
Subrule Id
End Src Ip Addr
: 172.25.5.125
End Dest Ip Addr : 172.25.10.125
: 2
IDL series User Guide
Advertisement
Table of Contents
