Quick Start Guide for VigorAccess 10
$create acl global macentry macaddr
00:00:00:01:02:03 deny enable Mac source address 00:00:00:01:02:03,04 access
from any bridge ports is denied
SHow to Filter Net BIOS
Users can use the following commands to filter Net BIOS. The commands are listed as below.
Command Description
$create filter rule entry ruleid <id>
action drop description NETBIOS-TCP
$create filter subrule tcp ruleid <id>
subruleid 1 srcportfrom 137 srcportto
139 srcportcmp inrange
$modify filter rule entry ruleid <id>
status enable
$create filter rule map ifname all
ruleid <id> stageid 1
$create filter rule entry ruleid <id2>
action drop description NETBIOS-UDP
$create filter subrule udp ruleid <id2>
subruleid 1 srcportfrom 137 srcportto
139 srcportcmp inrange
$modify filter rule entry ruleid <id2>
status enable
$create filter rule map ifname all
ruleid <id2> stageid 1
NETBIOS-NS: Name Service137 TCP/UDP
NETBIOS-DGM: Datagram Service 138 TCP/UDP
NETBIOS-SSN: Session Service 139 TCP/UDP
SHow to Enable Spanning Tree Protocol
Users can use the following commands to enable spanning tree protocol. The commands are listed as
below.
Command Description
$modify myswitch port info portid
<g1|g2|g3|g4> mac <macaddr> Configrated the mac address of connecting DSLAM
$modify myrstp cfg info status
<disable|enable> Enable or disable the RSTP status
SHow to Enable IGMP Snooping
Users can use the following commands to enable IGMP snooping. The commands are listed as below.
Be aware that IGMP Snooping is the Factory Default Setting.
Command Description
$modify igmpsnoop port info portid
<bridge-port-id> status enable
leavemode fastNormal
or
$modify igmpsnoop port info portid
<bridge-port-id> status enable
leavemode Fast
The feature is enabled in default.