Alcatel-Lucent 7950 SR, System Management Manual

Page: 133 / 462

Security
7950 SR OS System Management Guide Page 133
ssap
Syntax ssap ssap-value [ ssap-mask ]
no ssap
Context config>system>security>mgmt-access-filter>mac-filter>entry>match
Description
This command configures an Ethernet 802.2 LLC SSAP value or range for a MAC filter match
criterion.
This is a one-byte field that is part of the 802.2 LLC header of the IEEE 802.3 Ethernet Frame.
The snap-pid field, etype field, ssap and dsap fields are mutually exclusive and may not be part of the
same match criteria. Refer to the Router Configuration Guide for information about MAC Match
Criteria Exclusivity Rules fields that are exclusive based on the frame format.
The no form of the command removes the ssap match criterion.
Default no ssap
Parameters ssap-value — The 8-bit ssap match criteria value in hex.
Values 0x00 — 0xFF
ssap-mask — This is optional and may be used when specifying a range of ssap values to use as the
match criteria.
svc-id
Syntax svc-id service-id
no svc-id
Context config>system>security>mgmt-access-filter>mac-filter>entry>match
Description This command specifies an existing svc-id to use as a match condition.
Parameters service-id — Specifies a service-id to match.
Values service-id : 1 — 2147483647
svc-name : 64 characters maximum
src-port
Syntax src-port { port-id | cpm | lag port-id }
no src-port
Context config>system>security>mgmt-access-filter>ip-filter>entry
config>system>security>mgmt-access-filter>ipv6-filter>entry
Description
This command restricts ingress management traffic to either the
CPMCCM
Ethernet port or any
other logical port (for example LAG)on the device.