Lan Ip Filter - Fujitsu XG0224 User Manual

XG Series User's Guide
5.5.1.4

lan ip filter

Function
Available Model
Syntax
Options
Use Mode
Set the IP filter.
XG0224 / XG0448 / XG0440DC / XG0440DCR / XG2600
lan [<number>] ip filter <count> <action> acl <acl_count>
<number>
• lan definition number
Specify a lan definition serial number with a decimal value.
The default is 0.
<count>
• Filtering definition number
Specify a definition number, which indicates a filtering priority, with a decimal value.
The specified value is sorted and renumbered in sequence. If a filtering definition with
the same value already exists, the existing one will be changed.
Range
0 to 511 XG0224 / XG0448 / XG0440DC / XG0440DCR
0 to 63 XG2600
<action>
Set whether or not to transmit the packet to be filtered.
• pass
Transmit the relevant packet.
• reject
Block the relevant packet.
<acl_count>
• ACL definition number
Specify the required ACL definition number with a decimal value.
If the ACL specified in <acl_count> is not defined, the filtering definition will be disabled
and ignored.
Use the following ACL definition for IP filter.
- ip
If the ip value is not set, the filtering definition will be disabled and ignored.
- tcp
Available only when "6" is set in <protocol> of ip.
Otherwise, the set value is ignored.
If the tcp value is not set while "6" is set in <protocol> of ip, each value of tcp will be
assumed to be "any".
- udp
Available only when "17" is set in <protocol> of ip.
Otherwise, the set value is ignored.
If the udp value is not set while "17" is set in <protocol> of ip, each value of udp is
assumed to be "any".
- icmp
Available only when "1" is set in <protocol> of ip.
Otherwise, the set value is ignored.
If the icmp value is not set while "1" is set in <protocol> of ip, each value of icmp will
be assumed to be "any".
Configuration mode (admin class)
191
Chapter 5 Command Reference
Model
LAN Information Settings