Brocade Communications Systems 1606 Command Reference Manual page 432

Brocade fabric os command reference v6.3.0 (53-1001337-01, july 2009)

Hide thumbs Also See for 1606:

Table of Contents

--delrule policyname -rule rule_number

--transabort

To create an IP filter for a policy with an IPv6 address:

To add a new rule to the policy and specify the source IP address, destination port, and protocol,

and to permit the rule:

To display all existing IP filter policies:

The following arguments are supported with the --addrule option:

Specifies the source IP address. For filters of type IPv4, the address must be

a 32-bit address in dot notation, or a CIDR-style IPv4 prefix. For filters of type

IPv6, the address must be a 12- bit IPv6 address in any format specified by

RFC, or a CIDR-style IPv6 prefix.

Specifies the destination port number, a range of port numbers, or a service

Specifies the protocol type, for example tcp or udp.

Specifies the permit or deny action associated with this rule.

rule rule_number

Adds a new rule at the specified rule index number. The rule number must be

between 1 and the current maximum rule number plus one.

Deletes a rule from the specified IP filter policy. Deleting a rule in the

specified IP filter policy causes the rules following the deleted rule to shift up

in rule order. The change to the specified IP filter policy is not saved to the

persistent configuration until it is saved or activated.

A transaction is associated with a CLI or manageability session. It is opened

implicitly when running the --create, --addrule and --delrule

subcommands. --transabort explicitly ends the transaction owned by the

current CLI or manageability session. If a transaction is not ended, other CLI

or manageability sessions are blocked on the subcommands that would open

a new transaction.

switch:admin> ipfilter --create ex1 -type ipv6

switch:admin> ipfilter --addrule ex1 -sip fec0:60:69bc:60:260:69ff:fe80:d4a -dp 23 \

-proto tcp -act permit

switch:admin> ipfilter --show

Name: default_ipv4, Type: ipv4, State: active

Dest Port Action

Fabric OS Command Reference

53-1001337-01