Chapter 4: Using the Command Line Interface
156
Option
Description
reject
Discards traffic from all IP addresses, and an ICMP message is sent to the source host for
failure notification.
Tip: You can combine both commands to modify all firewall control parameters at a time. See Multi-Command Syntax (on
page 122).
Managing Firewall Rules
You can add, delete or modify firewall rules using the CLI commands.
•
An IPv4 firewall control rule command begins with
security ipAccessControl ipv4 rule
.
•
An IPv6 firewall control rule command begins with
security ipAccessControl ipv6 rule
.
Adding a Firewall Rule
Depending on where you want to add a new firewall rule in the list, the command for adding a rule varies.
•
IPv4 commands
Add a new rule to the bottom of the IPv4 rules list:
config:#
security ipAccessControl ipv4 rule add <direction> <ip_mask> <policy>
Add a new IPv4 rule by inserting it above or below a specific rule:
config:#
security ipAccessControl ipv4 rule add <direction> <ip_mask> <policy>
<insert> <rule_number>
-- OR --
config:#
security ipAccessControl ipv4 rule add <direction> <insert> <rule_number>
<ip_mask> <policy>
•
IPv6 commands
Add a new rule to the bottom of the IPv6 rules list:
config:#
security ipAccessControl ipv6 rule add <direction> <ip_mask> <policy>
Add a new IPv6 rule by inserting it above or below a specific rule:
config:#
security ipAccessControl ipv6 rule add <direction> <ip_mask> <policy>
<insert> <rule_number>
-- OR --
