LEGRAND Raritan PX3TS User Manual page 644

Chapter 9: Using the Command Line Interface
config:# security roleBasedAccessControl ipv6 rule add <start_ip> <end_ip> <role>
<policy> <insert> <rule_number>
config:# security roleBasedAccessControl ipv4 rule modify <rule_number>
startIpAddress <start_ip> endIpAddress <end_ip>
624
Variables:
•
<start_ip> is the starting IP address.
•
<end_ip> is the ending IP address.
•
<role> is the role for which you want to create an access control rule.
•
<policy> is one of the options: allow or deny.
Policy Description
allow Accepts traffic from the specified IP address range
when the user is a member of the specified role
deny Drops traffic from the specified IP address range when
the user is a member of the specified role
•
<insert> is one of the options: insertAbove or insertBelow.
Option Description
insertAbove Inserts the new rule above the specified rule number.
Then:
new rule's number = the specified rule number
insertBelow Inserts the new rule below the specified rule number.
Then:
new rule's number = the specified rule number + 1
•
<rule_number> is the number of the existing rule which you want to insert
the new rule above or below.
Modifying a Role-Based Access Control Rule
Depending on what to modify in an existing rule, the command syntax varies.
•
IPv4 commands
Modify a rule's IPv4 address range:
Modify an IPv4 rule's role: