Alcatel-Lucent 7950 SR, System Management Manual

Page: 176 / 462

CPM Filter Commands
Page 176 7950 SR OS System Management Guide
The default-action is applied to a packet that does not satisfy any match criteria in any of the man-
agement access filters. Whenever management access filters are configured, the default-action must
be defined.
Default No default-action is defined.
Parameters permit — Specifies that packets not matching the configured selection criteria in any of the filter
entries will be permitted.
deny — Specifies that packets not matching the selection criteria be denied and that an ICMP host
unreachable message will not be issued.
dscp
Syntax dscp dscp-name
no dscp
Context config>sys>sec>cpm>ip-filter>entry > match
config>sys>sec>cpm>ipv6-filter>entry>match
config>sys>sec>cpm>mac-filter>entry>match
Description This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter match crite-
rion.
The no form of the command removes the DSCP match criterion.
Default
no dscp — No dscp match criterion.
Parameters
dscp-name — Configures a dscp name that has been previously mapped to a value using the dscp-
name command. The DiffServ code point may only be specified by its name.
dst-ip
Syntax dst-ip ipv6-address/prefix-length
dst-ip ipv6-prefix-list ipv6-prefix-list-name
no dst-ip
Context config>sys>sec>cpm>ip-filter>entry > match
cfg>sys>sec>cpm>ipv6-filter>entry>match
Description
This command configures a destination IP address range to be used as an IP filter match criterion.
To match on the destination IP address, specify the address and its associated mask, for example,
10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 may also be used.
The no form of the command removes the destination IP address match criterion.
Default
No destination IP match criterion
Parameters
ip-address — Specifies the IP address for the IP match criterion in dotted decimal notation.
Values
0.0.0.0 — 255.255.255.255