eth
ether-type
ether-type
: 4 hex digits from 0001~FFFF, or any.
The following well known values are converted into hex values,
IPv4,ARP,RARP,DECnet Phase IV,AppleTalk (EtherTalk), AppleTalk Address
Resolution Protocol (AARP), Novell IPX (alt), Novell, Profinet, and IPv6.
On the controller the Ethertype=IPv6 rule is ignored. The controller always drops
IPv6 traffic. The rule is applied on Bridged At AP topologies.
mac
MAC address
MAC address
: MAC or CIDR address, or any.
ipaddress/mask
interface-subnet
interface-ip
any
Specifies an IP address and/or mask for this filter rule.
Specifies that the IP address and mask configured for the associated topology is
used for this filter rule.
Specifies the IP address of the associated topology used for this filter rule.
Specifies that any IP address or mask applies for this filter rule.
port
port
[
port
]
Specifies a TCP or UDP port or port range to which this filter rule will be applied.
The first <port> value specifies either the port or the start of a port range. The
second <port> value optionally specifies the end of a range. This parameter is
valid only when either TCP or UDP is the specified protocol. Valid port values are
from 0 - 65535.
type-code
type
[
type
]
Specifies an ICMP type code or range of ICMP type codes. The first
type
value
specifies either the ICMP type code or the start of a type code range. The second
type
value optionally specifies the end of a type code range. This parameter is
valid only when ICMP is the specified protocol. Valid
type
values are from 0 -
255.
in
(
none
|
src
|
dst
|
both
)
Specifies the direction of packet flow. — in specifies a packet flow from the AP to
the AC.
none specifies that the in direction will not be used as matching criteria in the filter
rule.
dst specifies that the IP address for this filter rule is the destination of the packet
flow.
src specifies that the IP address for this filter rule is the source of the packet flow.
both specifies that the IP address for this filter rule can be either source or
destination.
out
(
none
|
src
|
dst
|
both
)
Specifies the direction of packet flow. — out specifies a packet flow from the AC
to the AP.
none specifies that the out direction will not be used as matching criteria in the
filter rule.
dst specifies that the IP address for this filter rule is the destination of the packet
flow.
src specifies that the IP address for this filter rule is the source of the packet flow.
both specifies that the IP address for this filter rule can be either source or
destination.
allow
|
deny
| none |
contain2vlan
vlan-id
Specifies whether packets are allowed or denied (or ignored), or put in the
containment VLAN (you must specify the VLAN by its ID) when meeting the
criteria specified in the filter rule.
priority
(
0-7
|
none
)
Specifies the packet priority. Valid values are 0-7; the highest priority is 7.
Specifying none means priority level will not be used as matching criteria in this
CoS.
tos-dscp
(
tos-dscp
value/mask value
|
none
)
Specifies the type of service in the filter rule. Valid values are 0-FF for ToS/DSCP
and FF|FE|FC|F8|F0|E0|C0|80 for mask. Specifying none means tos/dscp value is
not used as matching criteria in the filter rule.
VNS Commands (vnsmode)
create
SCALANCE WLC711 CLI Reference Guide
269
Summary of Contents for scalance WLC711
Page 1: ...SCALANCE WLC711 CLI Reference Guide Release V9 21 14 C79000 G8976 C261 07 Published July 2015 ...
Page 21: ...dns 2 192 1 2 3 dns 3 192 1 3 3 Common Commands show SCALANCE WLC711 CLI Reference Guide 21 ...
Page 376: ...Example topology Commands vlanid SCALANCE WLC711 CLI Reference Guide 376 ...