A SERVICE OF

logo

1994 CHAPTER 130: PACKET FILTER FIREWALL CONFIGURATION COMMANDS
name acl-name: Specifies the Layer 2 ACL name, a case-insensitive string of 1 to
32 characters that must start with an English letter a to z or A to Z. To avoid
confusion, the word “all” cannot be used as the ACL name.
inbound: Filters packets in the inbound direction.
outbound: Filters packets in the outbound direction.
Description Use the
firewall ethernet-frame-filter command to configure Ethernet frame
filtering.
Use the
undo firewall ethernet-frame-filter command to remove the
Ethernet frame filtering.
Ethernet frame filtering is not performed by default.
Example # Configure Ethernet frame filtering rules on the inbound direction of interface
Ethernet 1/0.
<Sysname> system-view
[Sysname] bridge enable
[Sysname] bridge 1 enable
[Sysname] interface ethernet 1/0
[Sysname-Ethernet1/0] bridge-set 1
[Sysname-Etherhet1/0] firewall ethernet-frame-filter 4001 inbound
firewall fragments-inspect
Syntax firewall fragments-inspect
undo firewall fragments-inspect
View System view
Parameter None
Description Use the
firewall fragments-inspect command to enable fragments inspection.
Use the
undo firewall fragments-inspect command to disable fragments
inspection.
Be default, fragments inspection is disabled.
Related command: firewall fragments-inspect, and firewall packet-filter.
Example # Enable fragments inspection.
<Sysname> system-view
[Sysname] firewall fragments-inspect