Reference Guide

132 | inbound-firewall Dell Networking W-Series Instant 6.4.0.2-4.1 | CLI Reference Guide
inbound-firewall
inbound-firewall
rule <subnet> <smask> <dest> <mask> <match/invert> <protocol> <sport> <eport>
{permit|deny|src-nat|dst-nat ip <IP-address> <port>}[<option1....option9>]
no
Description
This command configures inbound firewall rules based on the source subnet.
Syntax
Command/Parameter Description Range Default
inbound-firewall
Opens the inbound firewall configuration
mode.
rule
Creates an access rule.
You can create up to 128 access rules.
However, it is recommended to delete
any existing configuration and apply
changes at regular intervals.
<subnet>
Allows you to specify the source subnet
IPaddress
<smask>
Specifies the subnet mask of the source
IP address.
<dest>
Allows you to specify the destination IP
address.
<mask>
Specifies the subnet mask for the
destination IP address.
<match/invert>
l match—Indicates if the rule specific to
the destination IP address and subnet
mask matches the value specified for
protocol.
l invert Indicates if the rule allows or
denies traffic with an exception to the
specified destination IP address and
subnet mask.
match
invert
<protocol>
Configures any of the following:
l Protocol number between 0-255
l any: any protocol
l tcp: Transmission Control Protocol
l udp: User Datagram Protocol
1-255
<sport>
Specifies the starting port number from
which the rule applies.
1-65534
<eport>
Specifies the ending port number until
which the rule applies
1-65534
dst-nat
Allows the W-IAP to perform destination