Zte ZXR10 8900 Series User Manual page 79

Chapter 5 Packet Filtering and Access Control Rule Configuration
Parameter
<string1>
log
yes|no
smac
<string2>
dmac
<string3>
l3protocol
all|0|tcp|6|udp|17|i
cmp|1|igmp|2|num
ber
sip
<string4>
dip
<string5>
sport
<number1>
sport_end
<number2>
dport
<number3>
dport_end
<number4>
Example:
To permit the
00:50:04:C3:B0:31 to access the device whose destination
ip is doc_server and destination port id is 8000, execute the
following command, where doc_server is predefined address.
ZXR10_FW.pf # rule add action accept smac
00:50:04:C3:B0:31 dip doc_server dport 8000
3. Adding one ARP/RARP/IPX packet filtering rule.
Command
ZXR10_FW.pf #rule add action
<accept|reject> l2protocol <arp|0806|r
arp|8035|ipx|8137>[log<yes|no>][area
<string>][smac < string 2>][dmac <
string 3>]
Parameter Description:
Confidential and Proprietary Information of ZTE CORPORATION
Description
This is one string, which must be one
predefined area resource.
This specifies whether to record it into log.
Yes|No
This sets source mac address.
This is one standard mac address string.
This sets destination mac address.
This is one standard mac address string.
This is the L3 protocol type used by packet.
All protocols/all protocols/TCP protocol/TCP
protocol/UDP protocol/UDP protocol/ICMP
protocol/ICMP protocol/IGMP protocol/User
inputs specified protocol number
This specifies source address, which must
be one predefined address.
This is one string.
This specifies destination address, which
must be one predefined address.
This is one string.
This specifies source start port id.
This is one number.
This specifies source end port id.
This is one number.
This specifies destination start port id.
This is one number.
This specifies destination end port id.
This is one number.
device whose source MAC address is
Function
This adds one
ARP/RARP/IPX packet
filtering rule.
69