< Home

firewall whitelist item

Function

The firewall whitelist item command configures whitelist entries.

The undo firewall whitelist item command deletes the configured whitelist entries.

Format

firewall whitelist item source-ip { source-IPv4-address | source-IPv6-address } [ source-port source-port ] [ protocol { tcp | udp | icmp | protocol-num } ]

firewall whitelist item destination-ip { destination-IPv4-address | destination-IPv6-address } [ destination-port destination-port ] [ protocol { tcp | udp | icmp | protocol-num } ]

undo firewall whitelist item source-ip { source-IPv4-address | source-IPv6-address } [ source-port source-port ] [ protocol { tcp | udp | icmp | protocol-num } ]

undo firewall whitelist item destination-ip { destination-IPv4-address | destination-IPv6-address } [ destination-port destination-port ] [ protocol { tcp | udp | icmp | protocol-num } ]

undo firewall whitelist item all

Parameters

Parameter Description Value
source-ip source-IPv4-address Specifies a source IPv4 address. The value is in dotted decimal notation.
source-ip source-IPv6-address Specifies a source IPv6 address. The value is in hexadecimal notation.
source-port source-port Specifies a source port number. The value is an integer ranging from 1 to 65535.
destination-ip destination-IPv4-address Specifies a destination IPv4 address. The value is in dotted decimal notation.
destination-ip destination-IPv6-address Specifies a destination IPv6 address. The value is in hexadecimal notation.
destination-port destination-port Specifies a destination port number. The value is an integer ranging from 1 to 65535.
protocol tcp Indicates TCP. -
protocol udp Indicates UDP. -
protocol icmp Indicates ICMP. -
protocol protocol-num Specifies a protocol number. The value is an integer ranging from 1 to 255.
all Indicates all whitelist entries. -

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Whitelist entries take effect only after the whitelist function is enabled. However, you can create whitelist entries regardless of whether the whitelist function is enabled or not.

Example

# Add the source IP address 1.1.1.1 to a whitelist.

<sysname> system-view
[sysname] firewall whitelist item source-ip 1.1.1.1
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >