Example:
$ create filter subrule arp ruleid 1 subruleid 2 opcode request srcmacaddrfrom 00:01:02:03:04:05 srcmacaddrto 00:01:02:03:04:10 dstmacaddrfrom 00:02:03:04:05:11 dstmacaddrto 00:02:03:04:05:15 srcipaddrfrom 172.25.1.125 srcipaddrto 172.25.5.125 dstipaddrfrom 172.25.6.125 dstipaddrto 172.25.10.125 srcmacaddrcmp inrange dstmacaddrcmp exrange srcipaddrcmp inrange dstipaddrcmp exrange ipsrcaddrmask 0xffff0000 ipdstaddrmask 0xffff0000 subruleprio high
Output:
Verbose Mode On
Entry Created
Rule Id | : 1 | Subrule Id | : 2 |
Opcode | : request |
|
|
Start Src Mac Addr | : 00:01:02:03:04:05 End Src Mac Addr | : 00:01:02:03:04:10 | |
Start Dest Mac Addr : 00:02:03:04:05:11 End Dest Mac Addr : 00:02:03:04:05:15
Start Src Ip Addr | : 172.25.1.125 | End Src Ip Addr | : 172.25.5.125 | |||
Start Dest Ip Addr | : 172.25.6.125 | End Dest Ip Addr | : 172.25.10.125 | |||
Src Mac Addr Cmp |
| : inrange |
|
|
| |
Dest Mac Addr Cmp : exrange |
|
|
| |||
Src Ip Addr Cmp |
| : inrange |
|
|
| |
Dest Ip Addr Cmp |
| : exrange |
|
|
| |
Ip Src Addr Mask |
| : 0xffff0000 |
|
|
| |
Ip Dest Addr Mask |
| : 0xffff0000 |
|
|
| |
Subrule Prio | : high |
|
|
| ||
Verbose Mode Off: |
|
|
|
|
| |
Entry Created |
|
|
|
|
| |
| Parameters |
|
|
|
|
| |
| Name |
| Description |
|
|
|
|
|
|
|
|
|
|
| Rule Id |
| Unique identifier of a filter rule of which this sub rule is being |
| ||
|
|
| created. |
|
|
|
|
|
|
|
|
| |
| Subrule Id |
| Unique identifier of a filter subrule. |
|
| |
|
|
|
|
| ||
| Opcode |
| The opcode identifies whether the packet is ARP request or reply. |
| ||
|
|
| This field specifies the type of packets on which the subrule is to |
| ||
|
|
| be applied. If 'any' is specified, both request and reply packets are |
| ||
|
|
| filtered. |
|
|
|
|
|
|
|
|
|
|
402 | IDL series User Guide |
|
|