Zte ZXR10 8900 Series User Manual page 78

ZXR10 8900 Series User Manual (FW Volume)
68 Confidential and Proprietary Information of ZTE CORPORATION
#pf
To exit from this command module, execute the following com-
mand:
#exit
1. Setting default packet filtering rule.
Command
ZXR10_FW.pf #rule set default action
<accept|reject> log<yes|no>
Parameter Description:
Parameter
accept|reject
log
yes|no
Example:
To set default packet filtering rule to permit and not record it
into log, execute the following command:
ZXR10_FW.pf # rule set default action accept log no
2. Adding one IP packet filtering rule.
Command
ZXR10_FW.pf #rule add action <acce
pt|reject> l2protocol <ip|0800>[area
<string1>][log <yes|no>][smac
<string2>][dmac <string3>][l3protocol
<all|0|tcp|6|udp|17|icmp|1|igmp
|2|number>][sip <string4>][ dip
<string5>][sport <number1>][dport
<number2>][ sport_end <number3>][
dport_end <number4>]
Parameter Description:
Parameter
add
action
accept|reject
l2protocol
ip|0800
area
Description
permit|deny
This specifies whether to record it in the log.
Yes|No
Description
This adds one packet filtering rule.
This is the action to packet meeting rules:
permit or deny
permit|deny
This is the L2 protocol type used by packet.
IP protocol|IP protocol number
This specifies area resource.
Function
This sets default
packet filtering rule.
Function
This adds one IP
packet filtering rule.