Home > Configuration > NS > addnssimpleacl

addnssimpleacl

Use this method to adds a simple ACL rule to the Citrix ADC. Simple ACL rules filter IPv4 packets on the basis of their source IP addresses and, optionally, the destination port and/or protocol. Any packet with the characteristics specified in the simple ACL rule is dropped.

Syntax



Parameters

aclname

Name for the simple ACL rule. Must begin with an ASCII alphabetic or underscore (_) character, and must contain only ASCII alphanumeric, underscore, hash (#), period (.), space, colon (:), at (@), equals (=), and hyphen (-) characters. Cannot be changed after the simple ACL rule is created.
This is mandatory parameter.

aclaction

Drop incoming IPv4 packets that match the simple ACL rule.
This is mandatory parameter.

srcip

IP address to match against the source IP address of an incoming IPv4 packet.
This is mandatory parameter.

destport

Port number to match against the destination port number of an incoming IPv4 packet. DestPort is mandatory while setting Protocol. Omitting the port number and protocol creates an all-ports and all protocols simple ACL rule, which matches any port and any protocol. In that case, you cannot create another simple ACL rule specifying a specific port and the same source IPv4 address.
Minimum value = 1.
Maximum value = 65535.

protocol

Protocol to match against the protocol of an incoming IPv4 packet. You must set this parameter if you have set the Destination Port parameter.

ttl

Number of seconds, in multiples of four, after which the simple ACL rule expires. If you do not want the simple ACL rule to expire, do not specify a TTL value.
Minimum value = 4.
Maximum value = 0x7FFFFFFF.

Return Value

Returns simpleResult

See Also