Set - Motorola WS2000 - Wireless Switch - Network Management Device Cli Reference Manual

3.15.6 Network Firewall Policy Outbound set Command

set

Network Firewall Policy Outbound Commands
Sets firewall policy parameters.
Syntax
set [saddr|daddr|tp|sport|dport|nat|action|logging]
Parameters
saddr <idx> <Ip Addr>
<netmask>
daddr <idx> <Ip Addr>
<netmask>
tp <idx> <tp>
sport <idx> <port1>
[<port2>]
dport <idx> <port1>
[<port2>]
nat <idx> <wan id>
action <idx> [allow|deny] Sets action of outbound firewall policy <idx> to
logging <idx>
[enable|disable]
Example
admin(network.fw.policy.outb)>set tp 1 gre
admin(network.fw.policy.outb)>list
-------------------------------------------------------------------------
Idx Src IP-Netmask
-------------------------------------------------------------------------
1 209.239.160.202- 168.192.36.4-
255.255.255.224
admin(network.fw.policy.outb)>set sport 1 20 21
admin(network.fw.policy.outb)>set dport 1 200 201
admin(network.fw.policy.outb)>set action 1 allow
admin(network.fw.policy.outb)>list
-------------------------------------------------------------------------
Idx Src IP-Netmask
-------------------------------------------------------------------------
1 209.239.160.202- 168.192.36.4-
255.255.255.224
Sets source IP address <Ip Addr> and IP netmask <netmask> for outbound
firewall policy <idx>.
Sets destination IP address <Ip Addr> and IP netmask <netmask> for
outbound firewall policy <idx>.
Sets transport protocol for outbound firewall policy <idx> to <tp> (one of all,
tcp, udp, icmp, ah, esp, gre).
Sets source port range for outbound firewall policy <idx> from <port1>
(1–65535) to <port2> (1–65535). If <port2> is not specified, <port1> is used
as the top end of the range.
Sets destination port range for outbound firewall policy <idx> from <port1>
(1–65535) to <port2> (1–65535). If <port2> is not specified, <port1> is used
as the top end of the range.
Sets NAT WAN ID for outbound firewall policy <idx> to
< > (0-8) where 0 = none,
wan id
Sets logging of outbound firewall policy <idx> to
Dst IP-Netmask Tp SPorts DPorts Rev. NAT
gre 1:
255.255.255.0
Dst IP-Netmask Tp SPorts DPorts Rev. NAT
gre 20:21 200:
255.255.255.0
Network CLI Commands Reference
1 = WAN 1, 2 = WAN 2, etc.
allow or deny.
enable
1: 0.0.0.0
65535 65535 nat port 0
0.0.0.0
201 nat port 0
3-79
or disable.
Action
deny
Action
allow