Chapter 20 Application Patrol

Table 64 app protocol rule Sub-commands (continued)

COMMAND

DESCRIPTION

[no] outbound-dscp-mark {<0..63> class

This is how the NXC handles the DSCP value of

{default dscp_class}}

the outgoing packets from a connection’s initiator

 

that match this policy.

 

Enter a DSCP value to have the NXC apply that

 

DSCP value. Set this to the class default to have

 

the NXC set the DSCP value to 0.

 

dscp_class: default af11 af12 af13 af21

 

af22 af23 af31 af32 af33 af41 af42 af43

 

wmm_bk8 wmm_bk16 wmm_be0 wmm_be24

 

wmm_vi32 wmm_vi40 wmm_vo48 wmm_vo56

 

User_define

 

 

port <0..65535>

Specifies the destination port. 0 means any.

[no] schedule schedule_name

Adds the specified schedule to the rule.

show

Displays the rule’s configuration

[no] source address_object

Adds the specified source address to the rule.

[no] to zone_name

Specifies the destination zone.

[no] user username

Adds the specified user to the rule.

20.2.3 Exception Commands for Pre-defined Applications

This table lists the commands for exception rules for application access controls. These commands are used for backward compatible only.

Table 65 app Commands: Exception Rules in Pre-Defined Applications

COMMAND

DESCRIPTION

app protocol_name exception insert rule_number

Creates a new rule at the specified row and enters

 

sub-command mode.

app protocol_name exception append

Creates a new rule, appends it to the end of the list,

 

and enters sub-command mode.

app protocol_name exception rule_number

Enters sub-command mode for editing the rule at

 

the specified row.

app protocol_name exception modify rule_number

Enters sub-command mode for editing the rule at

 

the specified row.

app protocol_name exception default or app

Enters sub-command mode for editing the default

protocol_name exception modify default

rule for the application.

app protocol_name exception move rule_number

Moves the specified rule (first index) to the

to rule_number

specified location. The process is (1) remove the

 

specified rule from the table; (2) re-number; (3)

 

insert the rule at the specified location.

 

 

130

 

NXC CLI Reference Guide