Chapter 20 Application Patrol

20.2.5 Rule Commands for Other Applications

This table lists the commands for rules in other applications.

Table 68 app Commands: Rules in Other Applications

COMMAND

DESCRIPTION

app other insert rule_number

Creates a new rule at the specified row and enters

 

sub-command mode.

app other append

Creates a new rule, appends it to the end of the list,

 

and enters sub-command mode.

app other <1..64>

Enters sub-command mode for editing the rule at

 

the specified row.

app other default

Enters sub-command mode for editing the default

 

rule for traffic of an unidentified application.

app other move rule_number to rule_number

Moves the specified rule (first index) to the

 

specified location. The process is (1) remove the

 

specified rule from the table; (2) re-number; (3)

 

insert the rule at the specified location.

 

 

no app other rule_number

Deletes the specified rule.

20.2.5.1 Other Rule Sub-commands

The following table describes the sub-commands for several application patrol other rule commands. Note that not all rule commands use all the sub-commands listed here.

Table 69 app patrol other rule Sub-commands

COMMAND

DESCRIPTION

[no] activate

Turns on this rule. The no command turns off this

 

rule.

[no] port <0..65535>

Specifies the destination port. 0 means any.

[no] schedule profile_name

Adds the specified schedule to the rule.

[no] user username

Adds the specified user to the rule.

[no] from zone_name

Specifies the source zone.

[no] to zone_name

Specifies the destination zone.

[no] source profile_name

Adds the specified source address to the rule.

[no] destination profile_name

Adds the specified destination address to the rule.

[no] protocol {tcp udp}

Adds the specified protocol to the rule.

access {forward drop reject}

Specifies the action when traffic matches the rule.

bandwidth {inboundoutbound} <0..1048576>

Limits inbound or outbound bandwidth, in kilobits

 

per second. 0 disables bandwidth management for

 

traffic matching this rule.

 

 

[no] bandwidth excess-usage

Enables maximize bandwidth usage to let the traffic

 

matching this policy “borrow” any unused

 

bandwidth on the out-going interface.

 

 

bandwidth priority <1..7>

Set the priority for traffic that matches this rule. The

 

smaller the number, the higher the priority.

132

 

NXC CLI Reference Guide