Chapter 4: Using the Command Line Interface
156
Option
Description
insertBelow
Inserts the new rule below the specified rule number. Then:
new rule's number = the specified rule 1
•
<rule_number> is the number of the existing rule which you want to insert the new rule above or below.
Modifying a Role-Based Access Control Rule
Depending on what to modify in an existing rule, the command syntax varies.
•
IPv4 commands
Modify a rule's IPv4 address range:
config:#
security roleBasedAccessControl ipv4 rule modify <rule_number>
startIpAddress <start_ip> endIpAddress <end_ip>
Modify an IPv4 rule's role:
config:#
security roleBasedAccessControl ipv4 rule modify <rule_number> role
<role>
Modify an IPv4 rule's policy:
config:#
security roleBasedAccessControl ipv4 rule modify <rule_number> policy
<policy>
Modify all contents of an existing IPv4 rule:
config:#
security roleBasedAccessControl ipv4 rule modify <rule_number>
startIpAddress <start_ip> endIpAddress <end_ip> role <role> policy
<policy>
•
IPv6 commands
Modify a rule's IPv6 address range:
config:#
security roleBasedAccessControl ipv6 rule modify <rule_number>
startIpAddress <start_ip> endIpAddress <end_ip>
Modify an IPv6 rule's role:
config:#
security roleBasedAccessControl ipv6 rule modify <rule_number> role
<role>
