Alcatel-Lucent 7705 SAR, System Management Manual

Page: 83 / 356

Security
7705 SAR OS System Management Guide 83
default-action
Syntax default-action { permit | deny | deny-host-unreachable }
Context config>system>security>management-access-filter>ip-filter
config>system>security>management-access-filter>ipv6-filter
Description
This command creates the default action for management access in the absence of a specific
management access filter match.
The default-action is applied to a packet that does not satisfy any match criteria in any of the
management access filters. Whenever management access filters are configured, the default-action
must be defined.
Default
n/a
Parameters
permit — specifies that packets not matching the configured selection criteria in any of the filter
entries will be permitted
deny — specifies that packets not matching the selection criteria will be denied
deny-host-unreachable — specifies that packets not matching the selection criteria will be
denied and a host unreachable message will be issued
entry
Syntax [ no ] entry
Context config>system>security>management-access-filter>ip-filter
config>system>security>management-access-filter>ipv6-filter
Description
This command is used to create or edit a management access filter entry. Multiple entries can be
created with unique
entry-id numbers. The 7705 SAR exits the filter upon the first match found and
executes the actions according to the respective action command. For this reason, entries must be
sequenced correctly from most to least explicit.
An entry may not have any match criteria defined (in which case, everything matches) but must have
at least the keyword
action defined to be considered complete. Entries without the action keyword are
considered incomplete and inactive.
The no form of the command removes the specified entry from the management access filter.
Default
n/a
Parameters
entry-id — an entry ID uniquely identifies a match criteria and the corresponding action. It is
recommended that entries be numbered in staggered increments. This allows users to insert a
new entry in an existing policy without having to renumber the existing entries.
Values
1 to 9999