Oracle^® Rack Universal Power Distribution Unit User's Guide

Add a Firewall Rule

1. To add a new IPv4 rule at the bottom of the IPv4 rules list, at the config:# prompt, type security ipAccessControl ipv4 rule add <direction> <ip_mask> <policy>, and press Enter.
2. To add a new IPv6 rule at the bottom of the IPv6 rules list, at the config:# prompt, type security ipAccessControl ipv6 rule add <direction> <ip_mask> <policy>, and press Enter.
3. To add a new IPv4 rule by inserting it above or below a specific rule, at the config:# prompt, type security ipAccessControl ipv4 rule add <direction> <ip_mask> <policy> <insert> <rule_number>, and press Enter.

   For example, to add an IPv4 rule to accept all packets sent from the IPv4 address 192.168.84.123 by inserting it above the fifth rule, at the config:# prompt, type security ipAccessControl ipv4 rule add 192.168.84.123/24 accept insertAbove 5, and press Enter. The original 5th rule becomes the 6th rule.

4. To add a new IPv6 rule by inserting it above or below a specific rule, at the config:# prompt, type security ipAccessControl ipv6 rule add <direction> <ip_mask> <policy> <insert> <rule_number>, and press Enter.

   <direction> is one of the options:

   • in – Inbound traffic.

   • out – Outbound traffic.

   <ip_mask> is the combination of the IP address and subnet mask values (or prefix length), which are separated with a slash. For example, 192.168.94.222/24.

   Policy Description accept Accepts traffic from/to the specified IP address(es). drop Discards traffic from/to the specified IP address(es), without sending any failure notification to the source or destination host. reject Discards traffic from/to the specified IP address(es), and an ICMP message is sent to the source or destination host for failure notification.

   <rule_number> is the number of the existing rule which you want to insert the new rule above or below.

   <insert> is one of the options:

   Insert Description insertAbove Inserts the new rule above the specified rule number. Then: new rule number = the specified rule number insertBelow Inserts the new rule below the specified rule number. Then: new rule number = the specified rule number + 1