Programmable Internetworking & Communication Operating System Docs ... Click Spaces -> Space Directory to see docs for all releases ...
To filter packets with a specific destination IP address, use the set firewall filter sequence from destination-address-ipv4 command in L2/L3 configuration mode. To remove the filter sequence, use the delete form of the command.
set firewall filter filter-name sequence sequence-number from destination-address-ipv4 address/mask
delete firewall filter filter-name sequence sequence-number from destination-address-ipv4
|sequence-number||Filter sequence number. The range is 0-9999.|
|address/mask||IPv4 subnet and subnet mask. For example, 10.1.1.0/24.|
The following example configures sequence 1 of the MyFilter filter to drop packets to the destination IP address 192.168.1.1:
admin@Switch# set firewall filter MyFilter sequence 1 from destination-address-ipv4 192.168.1.1/32
The following example prevents sequence 1 of the MyFilter filter from dropping packets based on destination IP packets:
admin@Switch# delete firewall filter MyFilter sequence 1 from destination-address-ipv4 Deleting: > destination-address-ipv4: 192.168.1.1/32 OK