Example
Command
Function
Command Format
Command
Function
Command Format
Parameter
Description
Command
Illustration
Example
Command
Function
Command Format
Parameter
Description
To reject TCP packets passing through and not record it into log,
execute the following command:
# rule add action reject l3protocol 6 log no
rule clean
This command is used to clear all packet filtering rules.
rule clean
rule delete
This command is used to delete one packet filtering rule.
rule delete id <number>
Parameter
<number>
To show rule id, execute command rule show.
To delete one rule whose ID is 8122, execute the following com-
mand:
# rule delete id 8122
rule modify
This command is used to modify one IP packet filtering rule.
rule modify id < numbe1>[action <accept| reject >][l2pro
tocol <ip|0800>][area <string1>][log <yes|no>][smac <str
ing2>][dmac <string3>][l3protocol <all|0|tcp|6|udp|17|icm
p|1|igmp|2| number>][sip <string4>][ dip <string5>][sport
<number2>][dport <number3>][ sport_end <numbe4>][ dpor
t_end <number5>]
Parameter
modify
id
< numbe1>
action
accept|reject
Confidential and Proprietary Information of ZTE CORPORATION
Description
This is rule id.
Description
This modifies one packet filtering rule.
This is rule id.
This is one number.
This is the action to packet meeting rules:
permit or deny.
permit|deny
Chapter 11 pf
123