Belden Hirschmann EAGLE40-03 Referenzhandbuch Seite 564

Parameter Value
P-3 1..2048
3 0 .1 .1 4 pa c k e t -filt e r l2 c om m it
Writes all changes made in the L2 firewall configuration to the device

Mode: Global Config Mode

Privilege Level: Operator

Format: packet-filter l2 commit
3 0 .1 .1 5 pa c k e t -filt e r l2 de fa ult polic y
Sets the default policy of the L2 rule tables.

Mode: Global Config Mode

Privilege Level: Operator

Format: packet-filter l2 defaultpolicy <P-1>
Parameter Value
P-1 accept
drop
3 0 .1 .1 6 pa c k e t -filt e r l2 fc s-va lida t ion
Activates/Deactivates FCS validation

Mode: Global Config Mode

Privilege Level: Operator

Format: packet-filter l2 fcs-validation <P-1>
Parameter Value
enable
P-1
disable
3 0 .1 .1 7 pa c k e t -filt e r l2 rule a dd
Adds a rule to the L2 firewall table.

Mode: Global Config Mode

Privilege Level: Operator

Format: packet-filter l2 rule add <P-1> action <P-2> [src-mac <P-3>] [dst-mac <P-
4>] [src-ip <P-5>] [sourceport <P-6>] [dest-ip <P-7>] [destport <P-8>] [ethertype
<P-9>] [proto <P-10>] [vlan <P-11>] [assign-queue <P-12>] [description <P-13>]
[rate-limit <P-14> <P-15> <P-16>] [tos <P-17>] [log <P-18>] [trap <P-19>]
action: Set Action
[src-mac]: Specify the source MAC address.
[dst-mac]: Specify the destination MAC address.
[src-ip]: Specify the source IP address/mask.
[sourceport]: Specify the source L4 port.
[dest-ip]: Specify the destination IP address/mask.
[destport]: Specify the destination L4 port.
[ethertype]: Specify the Ethertype.
[proto]: Specify the protocol for L2 firewall rule.
[vlan]: Specify the VLAN ID for L2 firewall rule.
[assign-queue]: Assign a user Queue.
[description]: Rule description/name for the L2 firewall rule.
[rate-limit]: Specify the rate limit and burst size.
[tos]: Specify TOS for L2 rule.
[log]: Set logging.
[trap]: Set sending SNMP traps.
Parameter Value
P-1 1..999
P-2 accept
drop
any
P-3
aa:bb:cc:dd:ee:ff
P-4 any
aa:bb:cc:dd:ee:ff
string
P-5
RM CLI EAGLE40-03
Release 04.1 03/2021
Meaning
Rule index
Meaning
Accept packets.
Drop packets without notification.
Meaning
Enable the option.
Disable the option.
Meaning
Rule index
Accept packets.
Drop packets without notification.
Enter any as a shortcut for the MAC address 00:00:00:00:00:00.
Enter the MAC address in hexadecimal format.
Enter any as a shortcut for the MAC address 00:00:00:00:00:00.
Enter the MAC address in hexadecimal format.
Source IP address/CIDR mask/'any'
117