Zte ZXR10 8900 Series Command Manual page 140

ZXR10 8900 Series Command Manual (FW Volume)
Command
Illustration
Example
124 Confidential and Proprietary Information of ZTE CORPORATION
Parameter
l2protocol
ip|0800
area
<string1>
log
yes|no
smac
<string2>
dmac
<string3>
l3protocol
all|0|tcp|6|udp|17|i
cmp|1|igmp|2|num
ber
sip
<string4>
dip
<string5>
sport
<number2>
sport_end
<number3>
dport
<number4>
dport_end
<number5>
As for execution of policy, "First match" principle is adopted, where
policy sequence is related to policy logic. After adding one policy,
by moving the position of packet filtering rule, policy execution
sequence can be changed.
To modify the rule and permit the device whose source MAC ad-
dress is 00:50:04:C3:B0:31 to access the device whose destina-
tion ip is doc_server and destination port id is 8080, execute the
following command,
# rule add action reject smac 00:50:04:C3:B0:31 dip
doc_server dport 8080
Description
This is the L2 protocol type used by packet.
IP Protocol
This specifies area resource.
This is one string, which must be one
predefined area resource.
This specifies whether to record it into log.
Yes|No
This sets source mac address.
This is one standard mac address string.
This sets destination mac address.
This is one standard mac address string.
This is the L3 protocol type used by packet.
All protocols/all protocols/TCP protocol/TCP
protocol/UDP protocol/UDP protocol/ICMP
protocol/ICMP protocol/IGMP protocol/User
inputs specified protocol number
This specifies source address, which must be
one predefined address.
This is one string.
This specifies destination address, which must
be one predefined address.
This is one string.
This specifies source start port id.
This is one number.
This specifies source end port id.
This is one number.
This specifies destination start port id.
This is one number.
This specifies destination end port id.
This is one number.