Alcatel-Lucent 7705 SAR, System Management Manual

Page: 92 / 356

Security Command Reference
92 7705 SAR OS System Management Guide
log
Syntax log log-id
no log
Context config>system>security>cpm-filter>ip-filter>entry
config>system>security>cpm-filter>ipv6-filter>entry
Description
This command specifies the log in which packets matching this entry should be entered. The value 0
indicates that logging is disabled.
The no form of the command deletes the log ID.
Parameters
log-id — the log ID where packets matching this entry should be entered
Values
101 to 199
match
Syntax match [ protocol protocol-id ]
no match
Context config>system>security>cpm-filter>ip-filter>entry
Description
This command enables the context to enter match criteria for the IPv4 filter entry. When the match
criteria have been satisfied, the action associated with the match criteria is executed.
If more than one match criterion (within one match statement) is configured, all criteria must be
satisfied (AND function) before the action associated with the match is executed.
A match context may consist of multiple match criteria, but multiple match statements cannot be
entered per entry.
The no form of the command removes the match criteria for the entry-id .
Parameters
protocol — configures an IP protocol to be used as an IP filter match criterion. The protocol type
such as TCP or UDP is identified by its respective protocol number.
protocol-id — configures the decimal value representing the IP protocol to be used as an IP filter
match criterion. Common protocol numbers include ICMP(1), TCP(6), UDP(17). The no
form of the command removes the protocol from the match criteria. See Table 5 for the
protocol IDs and descriptions for the IP protocols.
Values
0 to 255 (values can be expressed in decimal, hexadecimal, or
binary – DHB)
keywords - none, crtp, crudp, egp, eigrp, encap, ether-ip, gre,
icmp, idrp, igmp, igp, ip, ipv6, ipv6-frag, ipv6-icmp, ipv6-no-
nxt, ipv6-opts, ipv6-route, isis, iso-ip, l2tp, ospf-igp, pim, pnni,
ptp, rdp, rsvp, stp, tcp, udp, vrrp
* — udp/tcp wildcard