User's Manual

Chapter 20 Application Patrol
NXC CLI Reference Guide
130
20.2.3 Exception Commands for Pre-defined Applications
This table lists the commands for exception rules for application access controls. These
commands are used for backward compatible only.
[no] outbound-dscp-mark {<0..63> | class
{default | dscp_class}}
This is how the NXC handles the DSCP value of
the outgoing packets from a connection’s initiator
that match this policy.
Enter a DSCP value to have the NXC apply that
DSCP value. Set this to the class default to have
the NXC set the DSCP value to 0.
dscp_class: default | af11 | af12 | af13 | af21 |
af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 |
wmm_bk8 | wmm_bk16 | wmm_be0 | wmm_be24 |
wmm_vi32 | wmm_vi40 | wmm_vo48 | wmm_vo56 |
User_define
port <0..65535> Specifies the destination port. 0 means any.
[no] schedule schedule_name Adds the specified schedule to the rule.
show Displays the rule’s configuration
[no] source address_object Adds the specified source address to the rule.
[no] to zone_name Specifies the destination zone.
[no] user username Adds the specified user to the rule.
Table 64 app protocol rule Sub-commands (continued)
COMMAND DESCRIPTION
Table 65 app Commands: Exception Rules in Pre-Defined Applications
COMMAND DESCRIPTION
app protocol_name exception insert rule_number Creates a new rule at the specified row and enters
sub-command mode.
app protocol_name exception append Creates a new rule, appends it to the end of the list,
and enters sub-command mode.
app protocol_name exception rule_number Enters sub-command mode for editing the rule at
the specified row.
app protocol_name exception modify rule_number Enters sub-command mode for editing the rule at
the specified row.
app protocol_name exception default or app
protocol_name exception modify default
Enters sub-command mode for editing the default
rule for the application.
app protocol_name exception move rule_number
to rule_number
Moves the specified rule (first index) to the
specified location. The process is (1) remove the
specified rule from the table; (2) re-number; (3)
insert the rule at the specified location.