ZyXEL Communications Security Camera 3.1 ユーザーズマニュアル

ZyWALL (ZLD) CLI Reference Guide

This chapter covers how to use the packet flow filter feature.  

Use the packet flow filter to troubleshoot firewall rules and policy routes when specific packets you 
expect to go through the ZyWALL do not. 

The following table identifies some common values used in packet-flow commands. Other input 
values are discussed with the corresponding commands.

The following table lists the commands that you can use to have the ZyWALL display how the 
firewall and policy routes handle certain traffic. Use the configure terminal command to be able to 
use the commands that configure settings.  

Packet Flow Filter Command Input Values

The filter number to be displayed.

1 ~ 3 depending on the product.

The CPU core number of packet buffer to be displayed. This is not necessary for 
single-core products. For multi-core products the number ranges from 1 to the 
model’s limit.

Packet Flow Filter Commands

packet-flow filter 

Enters sub-command mode for configuring the specified packet flow filter. 

[no] enable

Enables or disables the packet flow filter you are configuring.

[no] source {any|ipv4}

Sets the source address to any address or a specific IPv4 address.

[no] destination {any|ipv4}

Sets the destination address to any address or a specific IPv4 address.

[no] host {any|ipv4}

Sets the source address to any address or a specific IPv4 address.

[no] protocol {any|<1..255>}

Sets the filter to work on any protocol’s traffic or a specific one. 

[no] src-port 

{any|<1..65535>}

Sets the source port to any address or a specific port number.

[no] dst-port 

{any|<1..65535>}

Sets the destination port to any address or a specific port number.