Brocade Communications Systems StoreFabric SN6500B Command Reference Manual page 503

To add a new rule to the policy and specify the source IP address, destination port, and protocol, and to
permit the rule:
To display all existing IP filter policies:
To activate the IP Filter policy "ex1":
To display al l IP Filter policies, including the activated policy:
Fabric OS Command Reference
53-1002746-01
switch:admin> ipfilter --addrule ex1
-sip fec0:60:69bc:60:260:69ff:fe80:d4a -dp 23
-proto tcp -act permit
switch:admin> ipfilter --show
Name: default_ipv4, Type: ipv4, State: active
Rule Source IP
1 any
2 any
3 any
4 any
5 any
6 any
7 any
8 any
9 any
10 any
11 any
12 any
Name: default_ipv6, Type: ipv6, State: active
Rule Source IP Protocol
1 any tcp
2 any tcp
3 any tcp
4 any tcp
5 any tcp
6 any tcp
7 any tcp
8 any udp
9 any udp
10 any udp
11 any tcp
12 any udp
switch:admin> ipfilter --activate ex1
switch:admin> ipfilter --show
Name: default_ipv4, Type: ipv4, State: active
Rule Source IP
1 any
2 any
3 any
4 any
5 any
6 any
7 any
8 any
9 any
10 any
\
Protocol Dest Port
tcp 22
tcp 23
tcp 897
tcp 898
tcp 111
tcp 80
tcp 443
udp 161
udp 111
udp 123
tcp 600 - 1023
udp 600 - 1023
Dest Port
22
23
897
898
111
80
443
161
111
123
600 - 1023
600 - 1023
Protocol Dest Port
tcp 22
tcp 23
tcp 897
tcp 898
tcp 111
tcp 80
tcp 443
udp 161
udp 111
udp 123
ipFilter
\
Action
permit
permit
permit
permit
permit
permit
permit
permit
permit
permit
permit
permit
Action
permit
permit
permit
permit
permit
permit
permit
permit
permit
permit
permit
permit
Action
permit
permit
permit
permit
permit
permit
permit
permit
permit
permit
2
475