Concept Guide

156 | inbound-firewall Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | CLI Reference Guide
Command/Parameter Description Range Default
which the rule applies.
<eport>
Specifies the ending port number until
which the rule applies
1-65534 —
dst-nat
Allows the W-IAP to perform destination
NAT on packets.
— —
src-nat
Allows the W-IAP to perform source NAT
on packets. When configured, the
source IP changes to the outgoing
interface IP address (implied NAT pool)
or from the pool configured (manual
NAT pool).
— —
ip <IP-addr>
Specifies the destination NAT IP address
for the specified packets when dst-nat
action is configured.
— —
<port>
Specifies the destination NAT port for
the specified packets when dst-nat
action is configured.
— —
deny
Creates a rule to reject the specified
packets
— —
<option1…option9>
Allows you to specify any of the
following options:
l Log—Creates a log entry when this
rule is triggered.
l Blacklist—Blacklists the client when
this rule is triggered.
l Classify-media—Performs a packet
inspection on all non-NAT traffic and
marks the critical traffic.
l Disable-scanning—Disables ARM
scanning when this rule is triggered.
l DSCP tag—Specifies a DSCP value to
prioritize traffic when this rule is
triggered.
l 802.1p priority—Sets an 802.1p
priority.
— —
no…
Removes the configuration — —
Usage Guidelines
Use this command to configure inbound firewall rules for the inbound traffic coming through the uplink ports
of a W-IAP. The rules defined for the inbound traffic are applied if the destination is not a user connected to