Filter and Firewall
Left running head:
Chapter name (automatic)
592
Beta
Beta
OmniAccess 700 CLI Command Reference Guide
Alcatel-Lucent
DEBUG
FIREWALL
debug firewall
{
session
|
filter
|
nat
|
attack
|
alg
|
intrusion
|
selector
[
saddr
<
ip-
address>
|
daddr
<ip-address>
|
protocol
<number>
|
sport
<number>
|
dport
<number>
][
output
|
permanent
]|
all
[
detail-level
]}
D
ESCRIPTION
Enter this command in the Filter Configuration mode. This command turns on
debugging for the filter statistics configured. The “
selector
” keyword is used to
debug only selected traffic.
P
ARAMETERS
E
XAMPLE
The example below enables debugging for the source IP 10.91.0.52
ALU# debug firewall selector saddr 10.91.0.52
IP
FILTER
ip filter
<
name>
D
ESCRIPTION
Enter the IP Filter command in the Configuration mode. This command configures
a filter and enters the Filter Configuration mode.
P
ARAMETERS
E
XAMPLE
The Example below configures the IP filter f1
ALU(config)# ip filter f1
ALU(config-filter-f1)#
Parameter
Description
saddr
<
ip-address>
Source address.
daddr
<
ip-address>
Destination address.
protocol
<
number>
Protocol.
sport
<
number>
Source port number.
dport
<
number>
Destination port number.
Parameter
Description
name
Name for the filter being configured.