Nortel 4134 用户指南

107

Packet filter configuration

Configuring IPv4 packet filters

Configure IPv4 packet filters to be applied to one or more interfaces.

Procedure steps

Step

Action

To enter configuration mode, enter:

configure terminal

To specify the name of the IP packet filter to create or configure,
enter:

ip packet-filter <packet-filter-name>

To configure rules for the packet filter, enter:

[no] {add | insert <lineno>}

{permit | deny}

{tcp | udp | icmp | ip | igmp | <0-255>}

<src-address> <dst-address>

[sport <src-port>] [dport <dst-port>]

[icmptype <icmp-type>]

[icmpcode <icmp-code>]

[igmptype <igmp-type>]

[precedence <precedence>]

[dscp <dscp>]

[tos <tos>]

[flags <tcp-flags>]

[fragments {on|off}]

[log {on|off}]

[expire <expiry-time>]

—End—

Nortel Secure Router 4134

Security — Configuration and Management

NN47263-600

01.02

Standard

10.0

3 August 2007