ARRIS 2247-N8-10NA (v9.1.x) Admin Handbook - Manual (Page 33)

33
set gfs name filterset_name default-action value [ pass | drop ]
Executes the named filterset’s default action: pass , or drop .
set gfs name filterset_name rule number enable [ on | off ]
Dynamically enables or disables the specified filterset rule.
set gfs name filterset_name rule number active [ on | off ]
Activates or deactivates the specified filterset rule.
set gfs name filterset_name rule number type [ either | ipv4 | ipv6 ]
Specifies whether the named filterset rule applies to IPv4, IPv6, or both (either).
set gfs name filterset_name rule number action value [ pass | drop | accept ]
Executes the named filterset’s action: pass , drop , or accept .
set gfs name filterset_name rule number order number
Determines order of execution of filterset rules (1 before 2, etc). If order is unspecified, the value of order is
set to 1 more than the last order in the filterset. If order is set to an already existing order value, order values
of other rules are incremented automatically.
set gfs name filterset_name rule number match number category [ src-ip-addr | dst-ip-addr
| ip-proto | src-port | dst-port | tcp-flags | src-host-mac | dst-host-mac | in-link-oid
| out-link-oid | icmp-type ]
Matches on the following categories:
src-ip-addr (ip[4|6] address or subnet spec (type ip4 or ip6 only))
dst-ip-addr (ip[4|6] address or subnet spec (type ip4 or ip6 only))
ip-proto (0-255 or iana-defined string equivalents)
src-port (1-65535[:1-65535], only if ip-proto == TCP or UDP)
dst-port (1-65535[:1-65535], only if ip-proto == TCP or UDP)
tcp-flags (only if ip-proto == TCP)
icmp-type (only if ip-proto == ICMP or IPv6 ICMP)
src-host-mac (MAC address of src)
dst-host-mac (MAC address of dest)
in-link-oid (oid of ingress link oid)
out-link-oid (oid of egress link oid)