Zte ZXR10 8900 Series User Manual page 82

ZXR10 8900 Series User Manual (FW Volume)
72 Confidential and Proprietary Information of ZTE CORPORATION
Parameter
smac
<string2>
dmac
<string3>
l3protocol
all|0|tcp|6|udp|17|i
cmp|1|igmp|2|num
ber
sip
<string4>
dip
<string5>
sport
<number2>
sport_end
<number3>
dport
<number4>
dport_end
<number5>
Command Illustration:
As for execution of policy, "First match" principle is adopted,
where policy sequence is related to policy logic. After adding
one policy, by moving the position of packet filtering rule, policy
execution sequence can be changed.
Example:
To modify the rule whose id is 8054 and permit the device
whose source MAC address is 00:50:04:C3:B0:31 to access
the device whose destination ip is doc_server and destination
port id is 8080, execute the following command,
ZXR10_FW.pf # rule modify id 8054 action reject
smac 00:50:04:C3:B0:31 dip doc_server dport 8080
6. Clearing all packet filtering rules.
Command
ZXR10_FW.pf #rule clean
7. Deleting one packet filtering rule.
Description
This sets source mac address.
This is one standard mac address string.
This sets destination mac address.
This is one standard mac address string.
This is the L3 protocol type used by packet.
All protocols/all protocols/TCP protocol/TCP
protocol number/UDP protocol/UDP
protocol number/ICMP protocol/ICMP
protocol number/IGMP protocol/IGMP
protocol number/User inputs specified
protocol number
This specifies source address, which must
be one predefined address.
This is one string.
This specifies destination address, which
must be one predefined address.
This is one string.
This specifies source start port id.
This is one number.
This specifies source end port id.
This is one number.
This specifies destination start port id.
This is one number.
This specifies destination end port id.
This is one number.
Function
This clears all packet
filtering rules.