Zte ZXR10 8900 Series User Manual page 81

Chapter 5 Packet Filtering and Access Control Rule Configuration
Parameter
area
<string1>
smac
<string2>
dmac
<string3>
Command Illustration:
To reject TCP packets passing through and not record it into
log, execute the following command:
ZXR10_FW.pf # rule add action reject l3protocol 6 log no
5. Modifying one IP packet filtering rule.
Command
ZXR10_FW.pf #rule modify id <
numbe1>[action <accept| reject
>][l2protocol <ip|0800>][area
<string1>][log <yes|no>][smac
<string2>][dmac <string3>][l3protocol
<all|0|tcp|6|udp|17|icmp|1|igmp|2|
number>][sip <string4>][ dip
<string5>][sport <number2>][dport
<number3>][ sport_end <numbe4>][
dport_end <number5>]
Parameter Description:
Parameter
modify
id
< numbe1>
action
accept|reject
l2protocol
ip|0800
area
<string1>
log
yes|no
Confidential and Proprietary Information of ZTE CORPORATION
Description
This specifies area resource.
This is one string, which must be one
predefined area resource.
This sets source mac address.
This is one standard mac address string.
This sets destination mac address.
This is one standard mac address string.
Function
This modifies one IP
packet filtering rule.
Description
This modifies one packet filtering rule.
This is rule id.
This is one number.
This is the action to packet meeting rules:
permit or deny.
permit|deny
This is the L2 protocol type used by packet.
IP protocol|IP protocol number
This specifies area resource.
This is one string, which must be one
predefined area resource.
This specifies whether to record it into log.
Yes|No
71