Draytek Vigor2860 User Manual page 795

Log Flag
Actions for packet not matching any rule:
Pass or Block
CodePage
Max Sessions Limit: 60000
Current Sessions : 0
Mac Bind IP
QOS Class
APP Enforcement
URL Content Filter: None
Load-Balance policy : Auto-select
--------------------------------------------------------------
CodePage
Window size
Session timeout
DrayTek Banner
---------------------------------------------------------------
Apply IP filter to VPN incoming packets
Accept large incoming fragmented UDP or ICMP packets: Enable
----------------------------------------------------------------
Strict Security Checking
[ ]APP Enforcement
>
T e l n e t C o m m
T e l n e t C o m m
This command is used to set filter rule for firewall.
S y n t a x
S y n t a x
ipf rule s r [-<command> <parameter> | ...
ipf rule s r -v
S y n t a x
S y n t a x
Parameter
s
r
<Command><parameter>
-e
-s o:g <obj>
–s u <Address Type> <Start IP
Address> <End IP Address> |
<Address Mask>
Vigor2860 Series User's Guide
: None
: Pass
: ANSI(1252)-Latin I
: Non-Strict
: None
: None
a n d : i p f r u l e
a n d : i p f r u l e
D e s c r i p t i o n
D e s c r i p t i o n
Description
Such word means Filter Set, range form 1~12.
Such word means Filter Rule, range from 1~7.
The following lists all of the available commands with parameters.
It means to enable or disable the rule setting.
0- disable
1- enable
It means to specify source IP object and IP group.
o - indicates "object".
g - indicates "group".
obj - indicates index number of object or index number of group.
Available settings range from 1-192. For example, "-s g 3" means
the third source IP group profile.
It means to configure source IP address including address type,
start IP address, end IP address and address mask.
u – It means "user defined".
Address Type - Type the number (representing different address
: ANSI(1252)-Latin I
: 65535
: 1440
: Enable
: Enable
781