HP StorageWorks Enterprise File Services WAN Accelerator 3.0.4 Command-Line Interface reference manual (AG421-96004, March 2007)

114 4 - CONFIGURATION-MODE COMMANDS
in-path rule deny
Denies connections for the source network and destination network. When packets for
connections match the in-path rule, the HP EFS WAN Accelerator actively tries to
reset the connection.
The no command option disables the in-path deny rule. The no command option has
the following syntax: no in-path <rulenum>.
Syntax [no] in-path rule deny {scraddr <network> dstaddr <network> dstport <port>
rulenum <rulenum>} [vlan <vlan tag ID>]
Parameters
Example
minna (config) # in-path rule deny scraddr 10.0.0.1 dstaddr 10.0.0.2
rulenum 4
minna (config) #
in-path rule discard
Description Packets for connections that match the rule are dropped silently. The HP EFS WAN
Accelerator filters traffic that matches the rules in discard.
The no command option disables the in-path discard rule. The no command option has
the following syntax: no in-path <rulenum>.
Syntax [no] in-path rule discard {dstaddr <network> dstport <port> rulenum
<rulenum> scraddr <network>} [vlan <vlan tag ID>]
Parameters
srcaddr <network> Specifies the source IP address. For example:
1.2.3.4/32
dstaddr <network> Specifies the destination IP address. For example:
1.2.3.4/32
dstport <port> Specifies the destination port for this rule. The destination port can
be a single port (number), a port label, or all specifies all ports.
rulenum <rulenum> Specifies the rule number: 1-N, start
, or end. The rule inserts itself
at the rule specified. For example, if rulenum is 3 then the new rule
will be #3, the old #3 rule will be #4 and so forth. The start option
specifies the rule to be the first rule, and end specifies it to be the
last rule.
vlan <vlan tag ID> Specifies the VLAN tag ID for which the rule applies. The VLAN
identification number is a value with a range from 0-4094 (0
specifies no-tagging).
dstaddr <network> Specifies the destination IP address. For example:
1.2.3.4/32
dstport <port> Specifies the destination port for this rule. The destination port can
be a single port (number), a port label, or all specifies all ports.