Belden Hirschmann EAGLE40-03 Referenzhandbuch Seite 566

3 0 .1 .1 8 pa c k e t -filt e r l2 rule m odify
Modifies a rule to the L2 firewall table.

Mode: Global Config Mode

Privilege Level: Operator

Format: packet-filter l2 rule modify <P-1> action <P-2> [src-mac <P-3>] [dst-mac <P-
4>] [src-ip <P-5>] [sourceport <P-6>] [dest-ip <P-7>] [destport <P-8>] [ethertype
<P-9>] [proto <P-10>] [vlan <P-11>] [assign-queue <P-12>] [description <P-13>]
[rate-limit <P-14> <P-15> <P-16>] [tos <P-17>] [log <P-18>] [trap <P-19>]
action: Set Action
[src-mac]: Specify the source MAC address.
[dst-mac]: Specify the destination MAC address.
[src-ip]: Specify the source IP address/mask.
[sourceport]: Specify the source L4 port.
[dest-ip]: Specify the destination IP address/mask.
[destport]: Specify the destination L4 port.
[ethertype]: Specify the Ethertype.
[proto]: Specify the protocol for L2 firewall rule.
[vlan]: Specify the VLAN ID for L2 firewall rule.
[assign-queue]: Assign a user Queue.
[description]: Rule description/name for L2 firewall rule.
[rate-limit]: Specify the rate limit and burst size.
[tos]: Specify TOS for L2 rule.
[log]: Set logging.
[trap]: Set sending SNMP traps.
Parameter Value
P-1 1..999
P-2 accept
drop
any
P-3
aa:bb:cc:dd:ee:ff
P-4 any
aa:bb:cc:dd:ee:ff
P-5 string
any
P-6
string
string
string
string
string
P-7
any
P-8
string
string
string
string
0x0600-0xfffft
P-9
appletalk
arp
ibmsna
ipv4
ipv6
ipx-old
mplsmcast
mplsucast
netbios
novell
pppoedisc
rarp
pppoesess
ipxnew
profinet
powerlink
ethercat
vlan8021q
RM CLI EAGLE40-03
Release 04.1 03/2021
Meaning
Rule index
Accept packets.
Drop packets without notification.
Enter any as a shortcut for the MAC address 00:00:00:00:00:00.
Enter the MAC address in hexadecimal format.
Enter any as a shortcut for the MAC address 00:00:00:00:00:00.
Enter the MAC address in hexadecimal format.
Source IP address/CIDR mask/'any'
any Any port/portless protocol
a-b Port Range
a,b Port List (may be longer than two ports)
a-b,c-d List of Port Ranges (may be longer than two ranges)
1 to 65535 Port Number
Target IP address/CIDR mask/'any'
any Any port/portless protocol
a-b Port Range
a,b Port List (may be longer than two ports)
a-b,c-d List of Port Ranges (may be longer than two ranges)
1 to 65535 Port Number
value Ethertype
Appletalk
ARP
IBMSNA
IPv4
IPv6
IPX-OLD
MPLS Multicast
MPLS Unicast
NetBIOS
NOVELL
PPPOEDISC
RARP
PPPOESESS
IPXNEW
PROFINET
POWERLINK
ETHERCAT
IEEE802_1Q VLAN
119