Specifications

ManualsBrandsEnterasys ManualsComputer equipmentAPS-3000

331

332

333

334

335

336

337

338

339

340

18-8 VNS Commands (vnsmode)

• config

• delete

• move

18.4.3.1 create

Usethecreatecommandtocreate,insert,orappendanewfilterruleintoanACfilterlistfor the

default‐policy.Thecreatecommandisaccessiblefromwithinthevnsmode:default‐

policy:acfilterscontext.

Ifadvancedfiltermodehasbeenenabledwiththeenable‐advance‐filteringcommand(page20‐3),

theAdvanced

modesyntaxispresented.Ifadvancedfiltermodeisnotenabled,theBasicmode

syntaxispresented.

Syntax

Basic mode sytax:

create <pos> proto <protocol> (<ipaddress/mask> | interface-subnet | interface-ip)

[(port <port> [<port>]) | (type <type> [<type>])] in (none|dst) out (none|src)

(allow | deny)

Advanced mode syntax:

create <pos> proto <protocol> (<ipaddress/mask> | interface-subnet | interface-ip)

[(port <port> [<port>]) | (type <type> [<type>])] in (none|src|dst|both) out

(none|src|dst|both) (allow | deny)

Parameters

<pos> Specifiesapositionvalueforthisfilterinthefilterlist.Validvaluesare

from0‐255.

proto<protocol> Specifiestheprotocolforthisfilterrulebynumberorname.Valid

numbervaluesarefrom0‐255.Validnamevaluesare:

• udp - UDP protocol

• tcp - TCP protocol

• ah - Authentication Header protocol

• esp - Encapsulating Security Payload protocol

• all - All protocols

• icmp - ICMP protocol

• gre - Generic Route Encapsulation protocol

<ipaddress/mask> SpecifiesanIPaddressandmaskforthisfilterrule.

interface‐subnet Specifiestha ttheIPaddressandmaskconfiguredfortheassociated

topologywillbeusedforthisfilterrule.

interface‐ip SpecifiestheIPaddressoftheassociatedtopologywillbeusedforthis

filterrule.

port<port>

[<port>]

SpecifiesaTCPor

UDPportorportrangetowhichthisfilterrulewill

beapplied.Thefirstvaluespecifieseithertheportorthestartofaport

range.Thesecondvalueoptionallyspecifiestheendofarange.This

parameterisonlyvalidwheneitherTCPorUDPisthespecified

protocol.Validportvaluesarefrom0‐65535.