Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) User Manual

Page 184

Advertising
background image

168

Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

4

rfs4000-229D58(config)#

Example 1:

rfs4000-229D58(config)# alias network-group $test host 192.168.1.10

192.168.1.11

rfs4000-229D58(config)# alias network-group $test network 192.168.2.0/24

192.168.3.0/24

rfs4000-229D58(config)# alias network-group $test address-range 192.168.4.10

to 192.168.4.20

In the preceding example, the network-group alias ‘$test’ includes hosts 192.168.1.10 and
192.168.1.11, networks 192.168.2.0/24 and 192.168.3.0/24 and address-range 192.168.4.10
to 192.168.4.20.

Example 2:

rfs4000-229D58(config)#alias network-service $kerberos proto tcp 749 750 80

proto tcp sourceport 20 proto udp 68 sourceport 67

rfs4000-229D58(config)#commit

In the preceding example, the network-service alias ‘$kerberos’ is configured to allow following
traffic:

TCP traffic to destination ports 749, 750, and 80

TCP traffic from source port 20

UDP traffic to destination port 68 and from source port 67

rfs4000-229D58(config)#alias string $DOMAIN test.brocade.com

rfs4000-229D58(config)#show context

!

! Configuration of Brocade Mobility RFS4000 version 5.5.0.0-071B

!

!

version 2.3

!

!

........................................................................

!

client-identity Android-4-1-X precedence 1700

client-identity Android-4-2-X precedence 1800

!

alias string $DOMAIN test.brocade.com'

!

ip access-list BROADCAST-MULTICAST-CONTROL

permit tcp any any rule-precedence 10 rule-description "permit all TCP

traffic"

permit udp any eq 67 any eq dhcpc rule-precedence 11 rule-description "permit

DHCP replies"

deny udp any range 137 138 any range 137 138 rule-precedence 20

rule-description "deny windows netbios"

deny ip any 224.0.0.0/4 rule-precedence 21 rule-description "deny IP

multicast"

deny ip any host 255.255.255.255 rule-precedence 22 rule-description "deny IP

l

--More--

Advertising