Specifications

Enterasys Wireless Controller Software CLI Reference Guide 18-17
Advanced mode syntax:
create <pos> proto <protocol> (<ipaddress/mask> | interface-subnet | interface-ip)
[(port <port> [<port>]) | (type <type> [<type>])] in (none|src|dst|both) out
(none|src|dst|both) (allow | deny)
Parameters
<pos> Specifiesapositionvalueforthisfilterinthefilterlist.Validvaluesare
from0‐255.
proto<protocol> Specifiestheprotocolforthisfilterrulebynumberorname.Valid
numbervaluesarefrom0‐255.Validnamevaluesare:
• udp - UDP protocol
• tcp - TCP protocol
• ah - Authentication Header protocol
• esp - Encapsulating Security Payload protocol
• all - All protocols
• icmp - ICMP protocol
• gre - Generic Route Encapsulation protocol
<ipaddress/mask> SpecifiesanIPaddressandmaskforthisfilter.
interface‐mask SpecifiesthattheIPaddressandmaskconfiguredfortheassociated
topologywillbeusedforthisfilterrule.
interface‐ip SpecifiestheIPaddressoftheassociatedtopologywillbeusedforthis
filterrule.
port<port>
[<port>]
SpecifiesaTCPorUDP
portorportrangetowhichthis filterrulewill
beapplied.Thefirstvaluespecifieseithertheportorthestartofaport
range.Thesecondvalueoptionallyspecifiestheendofarange.This
parameterisonlyvalidwheneitherTCPorUDPisthespecified
protocol.
Validportvaluesarefrom0‐65535.
type<type>[<type>] SpecifiesanICMPtypeorrangeofICMPtypes.Thisparameterisonly
validwhenICMPisthespecifiedprotocol.Validvaluesarefrom0‐
255.
Basic:in(none|dst)
Advanced:
in(none|src|dst|both)
Specifiesthedirectionofpacketflow.—inspecif iesapacketflow
from
theAPtotheAC(intonetwork).
nonespecifiesthattheindirectiondoesnotapplytothefilterrule.
dstspecifiesthattheIPaddressforthisfilterruleisthedestinationof
thepacketflow.
srcspecifiesthattheIPaddressforthisfilterruleisthesource
ofthe
packetflow.
bothspecifiesthattheIP addressforthisfilterrulecanbeeithersource
ordestination.