Symbol Technologies WS 2000 Switch User Manual


 
WS 2000 Wireless Switch System Reference Guide10-52
WS2000>admin(network.fw.policy.outb)> set
Description:
Sets firewall policy parameters.
Syntax:
Example:
admin(network.fw.policy.outb)>set tp 1 gre
admin(network.fw.policy.outb)>list
-----------------------------------------------------------------------------
Idx Src IP-Netmask Dst IP-Netmask Tp SPorts DPorts Rev. NAT Action
-----------------------------------------------------------------------------
1 209.239.160.202- 168.192.36.4- gre 1: 1: 0.0.0.0 deny
255.255.255.224 255.255.255.0 65535 65535 nat port 0
admin(network.fw.policy.outb)>set sport 1 20 21
admin(network.fw.policy.outb)>set dport 1 200 201
admin(network.fw.policy.outb)>set action 1 allow
admin(network.fw.policy.outb)>list
-----------------------------------------------------------------------------
Idx Src IP-Netmask Dst IP-Netmask Tp SPorts DPorts Rev. NAT Action
-----------------------------------------------------------------------------
1 209.239.160.202- 168.192.36.4- gre 20:21 200: 0.0.0.0 allow
255.255.255.224 255.255.255.0 201 nat port 0
set saddr
<idx> <Ip Addr> <netmask>
Sets source IP address and IP netmask for outbound firewall policy <idx>.
daddr
<idx> <Ip Addr> <netmask>
Sets destination IP address and IP netmask for outbound firewall policy
<idx>.
tp
<idx> <tp>
Sets transport protocol for outbound firewall policy <idx> to <tp> (one of
all, tcp, udp, icmp, ah, esp, or gre).
sport
<idx> <port1> [<port2>]
Sets source port range for outbound firewall policy <idx> from <port1> (1-
65535) to <port2>. If <port2> is not specified, <port1> is used as the top end
of the range.
dport
<idx> <port1> [<port2>]
Sets destination port range for outbound firewall policy <idx> from <port1>
(165535) to <port2>. If <port2> is not specified, <port1> is used as the top
end of the range.
nat
<idx> <wan idx>
Sets NAT WAN ID for outbound firewall policy <idx> to <wan idx> (08),
where 0 = none, 1 = WAN 1, 2 = WAN 2, etc.
action
<idx>
allow/deny Sets action of outbound firewall policy <idx> to allow or deny.