Alcatel-Lucent 7705 SAR, System Management Manual

Page: 100 / 356

Security Command Reference
100 7705 SAR OS System Management Guide
option-present
Syntax option-present { true | false }
no option-present
Context config>system>security>cpm-filter>ip-filter>entry>match
Description
This command configures matching packets that contain the option field or have an option field of 0
in the IP header as an IP filter match criterion.
The no form of the command removes the checking of the option field in the IP header as a match
criterion.
This command applies to IPv4 filters only.
Parameters
true — specifies matching on all IP packets that contain the option field in the header. A match
will occur for all packets that have the option field present. An option field of 0 is considered
as no option present.
false — specifies matching on IP packets that do not have any option field present in the IP header
(an option field of 0)
src-ip
Syntax src-ip { ip-address/mask | ip-address netmask }
no src-ip
Context config>system>security>cpm-filter>ip-filter>entry>match
Description
This command specifies the IPv4 address to match the source IP address of the packet.
To match on the source IP address, specify the address and its associated mask; for example, 10.1.0.0/
16. The conventional notation of 10.1.0.0 255.255.0.0 may also be used.
The no form of the command removes the source IP address match criterion.
Default
no src-ip
Parameters
ip-address — the IP prefix for the IP match criterion in dotted-decimal notation
Values
0.0.0.0 to 255.255.255.255
mask — the subnet mask length expressed as a decimal integer
Values
1 to 32
netmask — the dotted-decimal equivalent of the mask length
Values
0.0.0.0 to 255.255.255.255