Specifications

21-24 topology Commands
Usage
Ifthespecifiedexceptionfilterpositionalreadycontainsanexceptionfilter,specifyingan
exceptionfilterusingthiscommandinsertstheexceptionfilterinthespecifiedpositioninthelist
andresequencesallfiltersbelowthisfilterdownbyoneposition.Usethecreatecommandto
insertorappendarule at
thespecifiedposition.
Ifadvancedfiltermodehasbeenenabledwiththeenable‐advance‐filteringcommand(page20‐3),
theAdvancedmodesyntaxispresented.Ifadvancedfiltermodeisnotenabled,theBasicmode
syntaxispresented.
Examples
Thefollowingexamplecreatesanexceptionfilter.
EWC.enterasys.com:topology:r1:l3:exceptions# create 2 proto tcp 1.1.1.1/32 port
80 in dst deny
21.4.3.5.3 delete
Usethedeletecommandtodeleteanexceptionfilter.Thedeletecommandisavailablefromthe
topology:<named‐topology>:l3:exceptionscontextoftheCLIforb@ac,physical,androuted
topologies.
Syntax
delete <pos>
Parameters
Examples
Thefollowingexampledeletestheexceptionfilteratposition2.
EWC.enterasys.com:topology:r1:l3:exceptions# delete 2
Basic:in(none|dst)
Advanced:
in(none|src|dst|both)
Specifiesthedirectionofpacketflow—inspecifiesapacket
flowfromtheAPtotheAC.
nonespecifiesthattheindirectiondoesnotapplytothefilter
rule.
dstspecifiesthattheIPaddressfor thisfilterruleisthe
destinationofthe
packetflow.
srcspecifiesthattheIPaddressforthisfilterruleisthesourceof
thepacketflow.
bothspecifiesthattheIPaddressforthisfilterrulecanbeeither
sourceordestination.
(allow|deny) Specifieswhetherpacketswillbeallowedordeniedwhen
meetingthecriteriaspecifiedinthefilter
rule.
<pos> Specifiesthepositionoftheexceptionfilter(0–255).