Table of Contents
Advertisement
How to Filter MAC Address by Port
Users can use the following command to filter MAC address by port. The commands are listed as below.
Command
$create acl port macentry portId
<bridge-port-id> macaddr
00:00:00:01:02:03
$create acl port macentry portId
<bridge-port-id> macaddr
00:00:00:01:02:04
How to Deny MAC Address Globally
Users can use the following command to deny MAC Address globally. The commands are listed as below.
Command
$create acl global macentry macaddr
00:00:00:01:02:03 deny enable
How to Filter Net BIOS
Users can use the following command to filter Net BIOS. The commands are listed as below.
Command
$create filter rule entry ruleid <id>
action drop description NETBIOS-TCP
$create filter subrule tcp ruleid <id>
subruleid 1 srcportfrom 137 srcportto
139 srcportcmp inrange
$modify filter rule entry ruleid <id>
status enable
$create filter rule map ifname all
ruleid <id> stageid 1
$create filter rule entry ruleid <id2>
action drop description NETBIOS-UDP
$create filter subrule udp ruleid <id2>
subruleid 1 srcportfrom 137 srcportto
139 srcportcmp inrange
$modify filter rule entry ruleid <id2>
status enable
$create filter rule map ifname all
ruleid <id2> stageid 1
How to Enable Spanning Tree Protocol
Users can use the following command to enable spanning tree protocol. The commands are listed as
below.
Command
14
Description
Allow source address 00:00:00:01:02:03 access from
bridge port; bridge-port-id means other source
addresses from bridge port <bridge-port-id> are
denied
Allow source address 00:00:00:01:02:04 access from
bridge port; bridge-port-id means other source
addresses from bridge port <bridge-port-id> are
denied
Description
Mac source address 00:00:00:01:02:03,04 access
from any bridge ports is denied
Description
NETBIOS-NS: Name Service137 TCP/UDP
NETBIOS-DGM: Datagram Service 138 TCP/UDP
NETBIOS-SSN: Session Service
Description
Quick Start Guide for VigorAccess IVD
Version: 1.2
139 TCP/UDP
Advertisement
Table of Contents
