Alcatel-Lucent 7950 SR, System Management Manual

Page: 175 / 462

Security
7950 SR OS System Management Guide Page 175
match
Syntax match [ next-header next-header ]
no match
Context config>sys>sec>cpm>ipv6-filter>entry
Description
This command specifies match criteria for the IP filter entry.
The no form of this command removes the match criteria for the entry-id .
Parameters next-header next-header — Specifies the next header to match.
The protocol type such as TCP / UDP / OSPF is identified by its respective protocol number.
Well-known protocol numbers include ICMP(1), TCP(6), UDP(17).
Values next-header: 1 — 42, 45— 49, 52— 59, 61— 255 protocol numbers accepted
in DHB
keywords:
none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp, idrp,
igmp, igp, ip, ipv6, ipv6-icmp, ipv6-no-nxt, isis, iso-ip, l2tp, ospf-igp, pim, pnni,
ptp, rdp, rsvp, stp, tcp, udp, vrrp
* — udp/tcp wildcard
action
Syntax action { permit | deny }
no action
Context config>system>security>mgmt-access-filter>mac-filter
Description This command creates the action associated with the management access filter match criteria entry.
The action keyword is required. If no action is defined, the filter is ignored. If multiple action state-
ments are configured, the last one overwrites previous configured actions.
If the packet does not meet any of the match criteria the configured default action is applied.
Default none — The action is specified by default-action command.
Parameters permit — Specifies that packets matching the configured criteria will be permitted.
deny — Specifies that packets matching the configured selection criteria will be denied and that a
ICMP host unreachable message will not be issued.
default-action
Syntax default-action { permit | deny }
Context config>system>security>mgmt-access-filter>mac-filter
Description This command creates the default action for management access in the absence of a specific manage-
ment access filter match.