Table of Contents
Advertisement
How to Setup Port VLAN ID (PVID)
Users can use the following command to setup port VLAN ID. The commands are listed as below.
Command
$modify gvrp port info portid
<bridge-port-id> portvalnid
<default-pvid>
How to Filter MAC Address by Port
Users can use the following command to filter MAC address by port. The commands are listed as below.
Command
$create acl port macentry portId
<bridge-port-id> macaddr
00:00:00:01:02:03
$create acl port macentry portId
<bridge-port-id> macaddr
00:00:00:01:02:04
How to Deny MAC Address Globally
Users can use the following command to deny MAC Address globally. The commands are listed as below.
Command
$create acl global macentry macaddr
00:00:00:01:02:03 deny enable
How to Filter Net BIOS
Users can use the following command to filter Net BIOS. The commands are listed as below.
Command
$create filter rule entry ruleid <id>
action drop description NETBIOS-TCP
$create filter subrule tcp ruleid <id>
subruleid 1 srcportfrom 137 srcportto
139 srcportcmp inrange
$modify filter rule entry ruleid <id>
status enable
$create filter rule map ifname all
ruleid <id> stageid 1
$create filter rule entry ruleid <id2>
action drop description NETBIOS-UDP
$create filter subrule udp ruleid <id2>
subruleid 1 srcportfrom 137 srcportto
139 srcportcmp inrange
12
Description
Setup port VLAN ID
Description
Allow source address 00:00:00:01:02:03 access from
bridge port; bridge-port-id means other source
addresses from bridge port <bridge-port-id> are
denied
Allow source address 00:00:00:01:02:04 access from
bridge port; bridge-port-id means other source
addresses from bridge port <bridge-port-id> are
denied
Description
Mac source address 00:00:00:01:02:03,04 access
from any bridge ports is denied
Description
NETBIOS-NS: Name Service137 TCP/UDP
NETBIOS-DGM: Datagram Service 138 TCP/UDP
NETBIOS-SSN: Session Service
Quick Start Guide for VigorAccess
139 TCP/UDP
Advertisement
Table of Contents
