Siemens S323 User Manual

Page of 381
User Manual                                                                               UMN:CLI 
SURPASS hiD 6615 S223/S323 R1.5 
A50010-Y3-C150-2-7619                                                                         153 
7.6.4.4 Rule 
Action 
To specify a rule action (match) for the packets matching configured classifying patterns, 
use the following command. 
Command Mode 
Description 
match deny 
Denies a packet. 
match permit
 
Admin-rule
Permits a packet. 
 
To delete a specified rule action (match), use the following command. 
Command Mode 
Description 
no match deny 
no match permit
 
Admin-rule
Deletes a specified rule action. 
 
To specify a rule action (no-match) for the packets not matching configured classifying 
patterns, use the following command. 
Command Mode 
Description 
no-match deny 
Denies a packet. 
no-match permit
 
Admin-rule
Permits a packet. 
 
To delete a specified rule action (no-match), use the following command. 
Command Mode 
Description 
no no-match deny 
no no-match permit 
Admin-rule
Deletes a specified rule action. 
 
7.6.4.5 Applying 
Rule 
After configuring rule using the above commands, apply it to the system with the following 
command. If you do not apply a rule to the system, all specified rules will be lost. 
To save and apply an admin access rule, use the following command. 
Command Mode 
Description 
apply 
Admin-rule
Applies an admin access rule to the system. 
 
1.  The switch performs a detailed plausibility check and rejects the rule if the 
 
configuration is incomplete, contains bad or unsupported values or conflicts to other 
 
rules. In this case, the switch informs about the reason and the operator may correct 
 the 
values 
2.  The switch may reject a rule with the message “% Already exist rule” allthough the 
 
name will not be listed by command, show rule. Unfortunately, the entered name in 
 
this case interferes with the name of an internally managed rule. 
 
Remedy: Select another name for the rule (e.g. add a prefix).
 
3.  All previously entered values remain valid after successful (or unsuccessful) 
i