Command Syntax:

modify filter rule entry ruleid <ruleid-val> [ action drop allow setprio sendtocontrol retagprio copytocontrol clfrdef gotonextrule forwardexit exprdef modifytos setbaclevel pktvlanid retagvlanid pktservicevlanid retagservicevlanid retagserviceprio ratelimiter Mirror ] [ description <description-val> ] [ priority <priority-val> ] [ status enable disable ]

[ statsstatus enable disable ] [ ruleprio low high ] [ applywhenreq enable disable ] [ pkttype Mcast Bcast Ucast ] [ snooplevel interface bridge ] [ exprid <exprid-val> ] [ actionval <actionval-val> ] [ actionmask <actionmask-val> ]

Parameters:

Name

Description

 

 

ruleid <ruleid-val >

Unique identifier of a filter rule.

 

Type: Create － Mandatory

 

Delete － Mandatory

 

Modify － Mandatory

 

Get － Optional

 

Valid values: 1-65535

 

 

action drop allow

Action to be applied for the packets matching this filter rule. This field

setprio sendtocontrol

can be modified only if 'ruleStatus' has the value 'disable'.

retagprio copytocontrol

'exprdef(10)' action has a special significance that action is defined

clfrdef gotonextrule

in the expression. In this case the 'ExprId' field must be specified.

forwardexit exprdef

For other types of actions, the default relationship between subrules

modifytos setbaclevel

is all ANDed. If 'ruleDir' value is 'out', 'clfrdef' and 'ratelimiter' action

pktvlanid retagvlanid

types are invalid. If the action is 'clfrdef', then the rule can have at

pktservicevlanid

most one subrule, that too of type 'clfrtree'. The actions setprio,

retagservicevlanid

retagprio and setserviceprio require priority value to be specified in

retagserviceprio

ruleSetPrio parameter. The actions sendtocontrol, copytocontrol,

ratelimiter Mirror

modifytos, setbaclevel, setvlanid, retagvlanid, setservicevlanid,

 

retagservicevlanid, ratelimiter and mirror require an additional value

 

to be specified in ruleActionVal parameter. The actions

 

sendtocontrol, copytocontrol and modifytos also require

 

ruleActionMask parameter to be specified.

 

Type: Create － Optional

 

Modify － Optional

 

Default value: drop

 

 

description

Description of the application that receives packets matching this

<description-val>

rule. This field is valid and mandatory only if RuleAction is

 

'sendtocontrol' or RuleApplyWhenReq is 'enable'. This field can be

 

modified only if 'status' has the value 'disable' Type: Create －

 

 

384

IDL series User Guide