in-path passthrough rule block
Configures an in-path load-balancing rule that blocks pass-through traffic.
Syntax
in-path passthrough rule block addr <ip-address> port start <port> end <port> [description "<description>"] [rulenum <rule-number>] [vlan <vlan-id>]
Parameters
addr <ip-address> | Specifies the subnet IP address. |
port start <port> end <port> | Specifies the start of the port range and the end port number. |
description "<description>" | Specifies a description of the rule. |
rulenum <rule-number> | Specifies a rule number from 1 to N, start, or end. The system evaluate rules in numerical order starting with rule 1. If the conditions set in the rule match, then the rule is applied, and the system moves on to the next packet. If the conditions set in the rule do not match, the system consults the next rule. For example, if the conditions of rule 1 do not match, rule 2 is consulted. If rule 2 matches the conditions, it is applied, and no further rules are consulted. |
vlan <vlan-id> | Specifies the VLAN ID. |
Usage
These rules block existing pass-through connections and prevent formation of new pass-through connections that match a specified rule. A maximum of 105 rules is allowed.
Use reset connection rules to reset an existing connection and force a new connection to be formed. The feature ensures that upon reboot the system resets certain long-lived pass-through connections so they can be optimized. A badly formed rule can block traffic.
You cannot use the GUI to configure the in-path load-balancing rules. You can only use the CLI to configure these rules.
Example
amnesiac (config) # in-path passthrough rule block addr 10.0.0.1 port start 6509 end 6509 vlan 12
Product
Interceptor
Related Commands