Siemens SCALANCE S615 Configuration Manual page 321

Requirement
● The service name or protocol name has been created.
● You are in the FIREWALL configuration mode.
The command prompt is as follows:
cli(config-fw)#
Syntax
Call up the command with the following parameters:
ipv4rule from <string(50)> [<integer(0-4094)>] to <string(50)> [<integer(0-4094)>]
srcip <string(50)>
dstip <string(50)> action {drop|acc|rej} [service <string(32)>] [log
{no|info|war|cri}] [prior <integer(0-64)>]
The parameters have the following meaning:
Parameter
from
string
integer
to
string
integer
srcip
string
dstip
string
action
acc
SCALANCE S615 Command Line Interface
Configuration Manual, 06/2015, C79000-G8976-C406-02
Description
Keyword for the outgoing direc-
tion (from)
Interface that sends the IPv4
packet
Number of the interface
Keyword for the incoming direc-
tion (to)
Interface that receives the IPv4
packet
Number of the interface
Keyword for the source
Address that sends IPv4 packets. •
Keyword for the destination
Address that receives IPv4 pack-
ets.
Keyword for the action with in-
coming IPv4 packets
The data packets can pass
through.
Security and authentication
Range of values / note
-
Specify a valid interface.
Maximum of 50 characters
0 ... 4094
-
Specify a valid interface.
Maximum of 50 characters
0 ... 4094
-
Individual IP address: Specify the IP
address.
IP address range: Specify the range
•
with the start address "-" end address,
e.g.192.168.100.10 - 192.168.100.20.
All IP addresses: Specify " 0.0.0.0/0".
•
-
Individual IP address: Specify the IP
•
address.
IP address range: Specify the range
•
with the start address "-" end address,
e.g.192.168.100.10 - 192.168.100.20.
All IP addresses: Specify " 0.0.0.0/0".
•
-
-
9.2 Firewall
321