Alcatel-Lucent 7705 SAR, System Management Manual

Page: 91 / 356

Security
7705 SAR OS System Management Guide 91
ipv6-filter
Syntax ipv6-filter
Context config>system>security>cpm-filter
Description
This command enables the context to configure IPv6 CPM filter parameters.
entry
Syntax entry entry-id [ create ]
no entry entry-id
Context config>system>security>cpm-filter>ip-filter
config>system>security>cpm-filter>ipv6-filter
Description
This command specifies a particular CPM filter match entry. Every CPM filter must have at least one
filter match entry. A filter entry with no match criteria set will match every packet, and the entry action
will be taken.
The create keyword must be used with every new entry configured. Once the entry has been created,
you can navigate to the entry context without using the create keyword.
All IPv4 filter entries can specify one or more matching criteria. There are no range-based restrictions
on any IPv4 filter entries.
For IPv6 filters, the combined number of fields for all entries in a filter must not exceed 16 fields (or
256 bits), where a field contains the bit representation of the matching criteria.
Parameters
entry-id — identifies a CPM filter entry as configured on this system.
Values
1 to 64
action
Syntax action { accept | drop }
no action
Context config>system>security>cpm-filter>ip-filter>entry
config>system>security>cpm-filter>ipv6-filter>entry
Description
This command specifies the action to take for packets that match this filter entry.
Default
drop
Parameters
accept — packets matching the entry criteria will be forwarded
drop — packets matching the entry criteria will be dropped