Draytek VigorAccess User's Installation Manual page 62

4.3.4 How to Create VLAN
Commands are shown as below:
$create vlan static vlanname <vlan-name> valnid <vlan-id>
[egressports <bridge ports>]
4.3.5 How to Setup Port VALN ID (PVID)
Commands are shown as below:
$modify gvrp port info portid <bridge-port-id> portvalnid <default-pvid>
4.3.6 How to filter MAC address by port
Commands are shown as below:
$create acl port macentry portId <bridge-port-id> macaddr 00:00:00:01:02:03
$create acl port macentry portId <bridge-port-id> macaddr 00:00:00:01:02:04
// allow source address 00:00:00:01:02:03/04 access from bridge port
<bridge-port-id>
// other source addresses from bridge port <bridge-port-id> are denied
4.3.7 How to deny MAC address globally
Commands are shown as below:
$create acl global macentry macaddr 00:00:00:01:02:03 deny enable
// mac aource address 00:00:00:01:02:03,04 access from any bridge ports is denied
4.3.8 How to Filter Net BIOS
Commands are shown as below:
// NETBIOS-NS
// NETBIOS-DGM Datagram Service 138 TCP/UDP
// NETBIOS-SSN Session Service
$create filter rule entry ruleid <id> action drop description NETBIOS-TCP
$create filter subrule tcp ruleid <id> subruleid 1
srcportfrom 137 srcportto 139 srcportcmp inrange
$modify filter rule entry ruleid <id> status enable
$create filter rule map ifname all ruleid <id> stageid 1
$create filter rule entry ruleid <id2> action drop description NETBIOS-UDP
VigorAccess User Installation Guide
Name Service 137 TCP/UDP
139 TCP/UDP
62