Draytek Vigor 160 Series User Manual page 280

T e l n e t C o m m
T e l n e t C o m m
This command is used to set general rule for firewall.
S S y y n n t t a a x x
ipf set [Options]
ipf set [SET_NO] rule [RULE_NO] [Options]
S y n t a x
S y n t a x
Parameter
Options
SET_NO
RULE_NO
-v
-c [SET_NO]
-d [SET_NO]
-l [VALUE]
- p [VALUE]
-R [v4/v6][Enable/Disable]
-L [VALUE]
-C [VALUE]
-M [APPE_NO]
-U [URL_NO]
-W [WEB_NO]
-D [DNS_NO]
-g [VALUE]
-a [AD_SET]
-f [VALUE]
-t [VALUE]
-E [VALUE]
-Q [VALUE]
270
a n d : i p f s e t
a n d : i p f s e t
D e s c r i p t i o n
D e s c r i p t i o n
Description
There are several options provided here, such as -v, -c [SET_NO], -d
[SET_NO],... and etc.
It means to specify the index number (from 1 to 12) of filter set.
It means to specify the index number (from 1 to 7) of filter rule set.
Type "-v" to view the configuration of general set.
It means to setup Call Filter, e.g., -c 2. The range for the index
number you can type is "0" to "12" (0 means "disable).
It means to setup Data Filter, e.g., -d 3. The range for the index
number you can type is "0" to "12" (0 means "disable).
It means to setup Log Flag, e.g., -l 2
Type "0" to disable the log flag.
Type "1" to display the log of passed packet.
Type "2" to display the log of blocked packet.
Type "3" to display the log of non-matching packet.
It means to setup actions for packet not matching any rule, e.g., -p
1
Type "0" to let all the packets pass;
Type "1" to block all the packets.
: Accept routing packet from WAN
It means to enable/disable Strict Security Firewall.
0:Disable, 1:Enable
It means to set code page.
code page number ('?' for more information).
It means to set APPE for packets not matching any rule.
It means to set URL Content Filter for packets not matching any
rule.
It means to set WEB Content Filter for packets not matching any
rule.
It means to set DNS Filter for packet not matching any rule.
It means to set DNS Filter syslog.
0:Disable 1:Enable
It means to configure the advanced settings.
It means to accept large incoming fragmented UDP or ICMP packets.
0:Disable, 1:Enable
It means to enable Transparent Mode.
It means to set the session limitation max count.
VALUE : 0-32000
It means to set the QoS class.
Vigo160 Series User's Guide