Alcatel-Lucent 7705 SAR, System Management Manual

Page: 84 / 356

Security Command Reference
84 7705 SAR OS System Management Guide
action
Syntax action { permit | deny | deny-host-unreachable }
no action
Context config>system>security>management-access-filter>ip-filter>entry
config>system>security>management-access-filter>ipv6-filter>entry
Description
This command creates the action associated with the management access filter match criteria entry.
The action keyword is required. If no action is defined, the filter is ignored. If multiple action
statements are configured, the last one overwrites previous configured actions.
If the packet does not meet any of the match criteria, the configured default action is applied.
Default
n/a
Parameters
permit — specifies that packets matching the configured criteria will be permitted
deny — specifies that packets not matching the selection criteria will be denied
deny-host-unreachable — specifies that packets not matching the selection criteria will be
denied and a host unreachable message will be issued
dst-port
Syntax dst-port port [ mask ]
no dst-port
Context config>system>security>management-access-filter>ip-filter>entry
config>system>security>management-access-filter>ipv6-filter>entry
Description
This command configures a destination TCP or UDP port number or port range for a management
access filter match criterion.
The no form of the command removes the destination port match criterion.
Default
n/a
Parameters
port — the source TCP or UDP port number as match criteria
Values
1 to 65535 (decimal)
mask — mask used to specify a range of destination port numbers as the match criterion
This 16-bit mask can be configured using the formats in Table 4 .