Juniper MEDIA FLOW CONTROLLER 2.0.4 - ADMINISTRATOR S GUIDE AND CLI Administrator's Manual page 324

Media Flow Controller CLI Commands
<dhcp-hostname>. This is a global configuration command that affects all DHCP
interfaces. Changing this setting forces a renewal of DHCP on all interfaces.
•
domain-list
•
filter
implemented using IP tables, they implicitly operate only on the filter table.
•
chain <chain_name>
take an action:
•
•
•
•
enable
•
—Add or delete (with no) hostname/IP mappings for /etc/hosts.
host
•
map-hostname
•
name-server
324 ip
—Add or delete (with no) domains to try unqualified hostnames in.
—Configure IP filtering. The ip filter commands operate on nodes that are
—Choose a chain name, FORWARD, INPUT, or OUTPUT and
—Delete all rules from the specified chain.
clear
—Set the policy (default target) for a specified chain, or reset
policy <policy>
to its default (with no). All of the rules on this chain are overrides of this default.
Only these targets are allowed:
−
—Accept all traffic by default for this chain. Default policy for OUTPUT
ACCEPT
chain.
−
—Drop all traffic by default for this chain. Default policy for FORWARD and
DROP
INPUT chains.
rule <rule_number>
table), overwrite an existing rule, or delete an existing rule. If you specify a chain
and rule using the no variant (no ip filter chain <chain_name> rule
<rule_number>), just that rule is deleted and higher number rules are moved to
close the gap. If you specify a chain and just the keyword rule using the no
variant, all the rules for that chain are deleted and the chain's policy and baseline
are reset to their defaults. See
arguments.
−
move <rule_number> to <rule_number>
order in which they are placed in the IP filter table. Use this command to move
a rule from one place in the IP table to another. Surrounding rules are re-
numbered to keep the numbers consecutive.
−
append tail target<target> <rule_argument>
the existing rules.
−
insert <rule_number> target<target> <rule_argument>
new rule before the existing rule with the specified number; the number
specified must be that of an existing rule. The rule specified and all above it
are re-numbered to make room for the new rule.
−
set <rule_number> target<target> <rule_argument>
number of an existing rule to overwrite with the new rule. No attempt is made
to merge the old rule and new; the old one is obliterated.
−
modify <rule_number> target<target> <rule_argument>
rule number of an existing rule to modify. Only the parameters specified in
this invocation are changed; everything else is left untouched, except that
setting a criterion removes any corresponding not- criterion, and vice-versa.
—Enable or disable (with no) IP filtering of network traffic. Default is disabled.
—Set or delete (with no) a static host mapping for the current hostname.
—Add or delete (with no) DNS servers.
Media Flow Controller Administrator's Guide
—Add a filtering rule to the specified chain (in the "filter"
"ip filter chain rule arguments" on page 325
Copyright © 2010, Juniper Networks, Inc.
—IP filter rules are applied in the
—Add a new rule after all
—insert a
—Specify the rule
— Specify the
for rule