User manual

Chapter 4 - Layer 3 Command Set - IP Networking Ipfw Command (IP Firewall)
Alvarion BreezeNET B130/B300 GigE 176 Operational User Manual
13 Otherwise, i.e. if none of the above conditions has caused skipping the filter,
then the packet is treated in a way specified by the disp field of the filter.
Special filtering rules for ARP packets:
 ARP packets will always be permitted for those IP addresses and ranges of IP
addresses that are mentioned in permitting (accept) filters, even if those filters
are created for other types of packets.
4.9.3 Packet Filtering Rules Syntax
Syntax:
[{setpri|addpri}=N|-1|-2] accept|reject|rpfilter|pass [log]
[vlan=N] [dot1p=N] [swg=N] [ether=X] [dscp=N|tos=N]
-f "pcap filter expression"
|
PROTO from [not] ADDR [PORTs] to [not] ADDR [PORTs]
PROTO: [all] | tcp | udp | icmp | arp | proto NUMBER
ADDR: IP | $LOCAL | $ROUTE | $ACL | mac {x:x:x:x:x:x}
PORTS: NUM[:NUM] [NUM] ...
Description:
Below is a description of the syntax rules for creating packet filters. Most
attention is given to the syntax itself, but still filter usage questions are described
either.
A generic form of the filter description is given above in the Syntax paragraph.
Optional field interface defines the name of the network interface to which the
filter is going to be applied. Interface name depends upon the device model and
can be eth0 or rf5.0 for specifying Ethernet interface or radio interface
correspondingly. If th? interface parameter is set the filter will be applied only to
those packets which are received or transmitted through this interface.
Setpri/addpri parameters allow to set/increase priority for a packet when a
packet is treated by the filter. "Setpri" parameter is used to change a priority to
the value specified in the command. When using "-1" value a package priority is
dropped to the lowest priority. "Addpri" is used to change a priority only in case it
is higher than the previous one (Note: the smaller is the value the higher is the
priority). So you can only increase priority using "addpri" parameter.