Filter
Top Products
Chapter 10: Using the Command Line Interface
262
config:#
security ipAccessControl ipv4 rule add <ip_mask> <policy> <insert>
<rule_number>
-- OR --
config:#
security ipAccessControl ipv4 rule add <insert> <rule_number>
<ip_mask> <policy>
IPv6 commands
To add a new rule to the bottom of the IPv6 rules list, use this
command syntax:
config:#
security ipAccessControl ipv6 rule add <ip_mask> <policy>
To add a new IPv6 rule by inserting it above or below a specific
rule, use this command syntax:
config:#
security ipAccessControl ipv6 rule add <ip_mask> <policy> <insert>
<rule_number>
-- OR --
config:#
security ipAccessControl ipv6 rule add <insert> <rule_number> <ip_mask>
<policy>
Variables:
<ip_mask> is the combination of the IP address and subnet mask
values, which are separated with a slash. For example, an IPv4
combination looks like this: 192.168.94.222/24.
<policy> is one of the options: accept, drop or reject.
Policy
Description
accept
Accepts traffic from the specified IP address(es).
drop
Discards traffic from the specified IP address(es),
without sending any failure notification to the
source host.
reject
Discards traffic from the specified IP address(es),
and an ICMP message is sent to the source host
for failure notification.