
2-701
Cisco SCE 8000 CLI Command Reference
Chapter 2 CLI Command Reference
traffic-rule ip addresses
• ip-range is an IP subnet range, in dotted-decimal notation followed by the number of significant bits
(such as 10.1.2.0/24).
Port specification
all | ([all-but] [port-number] [port-range])
• Specify the port or port range for both the subscriber side and the network side.
• Specify a range of ports using the format minport:maxport.
• Specify ports only if the protocol is either TCP or UDP.
Tunnel ID specification
all | ([all-but] tunnel-id) '
• tunnel-id is a hexadecimal tunnel-ID range, in the format '(HEX)tunnel-id' or
'(HEX)min-tunnel-id:(HEX)max-tunnel-id
To enable or disable defining the traffic rule according to the tunnel ID, use the tunnel-id-mode
keyword.
Traffic counter name
Specify either:
• Name of an existing traffic counter—Packets meeting the criteria of the rule are to be counted in
the specified counter.
If a counter name is defined, the “count” action is also defined implicitly.
• none—An action must be explicitly defined with the action keyword.
Action
Specify one of the following options:
• block—Blocks the specified traffic.
• ignore—Bypasses the specified traffic. The traffic receives no service.
• quick-forwarding—Quick forwards (duplicates) delay-sensitive packets with service.
• quick-forwarding-ignore—Quick forwards (duplicates) delay-sensitive packets with no service.
• Flow-capture—Captures the flow matching the configured rule. This flow receives no service.
Use the no traffic-rule capture command to delete all current flow-capture rules.
Authorization: admin
Examples The following examples show how to use this command.
Example 1
The following example shows how to create a traffic rule called rule2:
• Name = rule2
• IP addresses: subscriber side = all IP addresses, network side = all IP addresses except the subnet
address 10.10.10.0/24
• Protocol = TCP
• subscriber-side port = 100
Komentarze do niniejszej Instrukcji