Specifications

20-18 policy Commands
Examples
Thefollowingexampleentersthepolicy:<named‐policy>:apfilterscontextforthep1<named‐
policy>:
EWC.enterasys.com:policy:p1# ulfilterap enable
EWC.enterasys.com:policy:p1# apcustom enable
EWC.enterasys.com:policy:p1# apfilters
EWC.enterasys.com:policy:p1:apfilters#
20.5.11.1 create
Usethecreatecommandtocreate,insert,orappendanewAPcustomfilterforthis<named‐
policy>.Thecreatecommandisaccessiblefromthepolicy:<named‐policy>:apfilterscontext.
Ifadvancedfiltermodehasbeenenabledwiththeenable‐advance‐filteringcommand(page20‐3),
theAdvancedmodesyntaxispresented.If
advancedfiltermodeisnotenabled,theBasicmode
syntaxispresented.
Syntax
Basic mode syntax:
create <pos> proto <protocol> (<ipaddress/mask> | interface-subnet | interface-ip)
[(port <port> [<port>]) | (type <type> [<type>])] in (none|dst) out (none|src)
(allow | deny)
Advanced mode syntax:
create <pos> proto <protocol> (<ipaddress/mask> | interface-subnet | interface-ip)
[(port <port> [<port>]) | (type <type> [<type>])] in (none|src|dst|both) out
(none|src|dst|both) (allow | deny)
Parameters
<pos> Specifiesapositionvalueforthisfilterinthefilterlist.Validvaluesare
from0‐255.
proto<protocol> Specifiestheprotocolforthiscustomfilterbynumberorname.Valid
numbervaluesarefrom0‐255.Validnamevaluesare:
• udp - UDP protocol
• tcp - TCP protocol
• ah - Authentication Header protocol
• esp - Encapsulating Security Payload protocol
• all - All protocols
• icmp - ICMP protocol
• gre - Generic Route Encapsulation protocol
<ipaddress/mask> SpecifiesanIPaddressandmaskforthiscustomfilter.
interface‐mask SpecifiesthattheIPaddressandmaskconfiguredfortheassociated
topologywillbeusedforthiscustomfilter.
interface‐ip SpecifiestheIPaddressoftheassociatedtopologywillbeusedforthis
customfilter.