Configuration Mode Commands : Client Accelerator commands : policy id in-path rule deny
  
policy id in-path rule deny
Adds an in-path rule that rejects connection requests on the specified policy.
Syntax
[no] policy id <id> in-path rule deny [srcaddr <subnet>] [dstaddr <subnet>] [dstport <port>] [rulenum <rule-number>] [description <description>]
Parameters
<id>
Policy ID number.
srcaddr <subnet>
Specifies the source subnet for this rule. IPv4 and IPv6 addresses are supported.
dstaddr <subnet> dstport <port>
Specifies the destination subnet and port for this rule. IPv4 and IPv6 addresses are supported.
For the port, you can specify a single port (number), a port label, or all to specify all ports.
rulenum <rule-number>
Specifies the order in which the rule is consulted: 1-N or start or end.
The rule is inserted into the list at the specified position. For example, if you specify rulenum as 3, the new rule will be #3, the old rule #3 becomes #4, and subsequent rules, if any, also move down the list.
Specify start for the rule to be the first rule and end for the rule to be the last rule.
If you do not specify a rule number, the rule is added to the end of the list.
description <description>
Specifies a description of the rule.
Usage
The Client Accelerator automatically intercepts traffic on all IP addresses (0.0.0.0) and ports (all) and optimizes according to default settings.
Specify deny rules for traffic you want to reject and return a message to the client that the request has been denied.
The no command option disables the rule. The no command option syntax is no in-path rule <rulenum>.
For detailed information about in-path rules, see the SteelHead User Guide.
Example
amnesiac (config) # policy id 1 in-path rule deny srcaddr 10.0.0.1/24 dstaddr 10.0.0.2/24 rulenum 5 description test
Product
Client Accelerator
Related Commands
show policy id