ip filter
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
593
Alcatel-Lucent
Beta
Beta
OmniAccess 700 CLI Command Reference Guide
To Configure a Rule for a Filter:
[<
1-65535
>]
match
[
any
|
all
]
<match-list name>...
{
permit
|
deny
[
reset
]}[
log
]
[
verbose
] [
timer <timer-object>
]
The above command is used to configure rules (associate match-lists and set
priority for the rule) for a filter, and also set the action deny or permit for the
configured rules.
default
{
deny
|
permit
}[
log
]
[
verbose
]
This command sets an action of either permit or deny on the filter.
The default action for a filter is “deny”.
Note:
The
reset
keyword can be used in conjunction only with the “
deny
” keyword.
Parameter
Description
1-65535
Denotes the filter rule number. The
range for the filter rule.
match
<
match-list name>
This command forms a match-list of the
Common classifiers that are pre-
configured. In this type of match, the
relevant action is performed even if one
rule in the list is satisfied.
deny
This command prohibits the traffic
through it.
permit
This command allows traffic through it.
The filter has to be set to this mode to
enable it.
deny
[
reset
]
Keyword "deny reset" sends TCP RST to
the source, for TCP traffic that matches
the classification, and drops packets for
other non-TCP traffic.
log
Logs the first packet of a session.
verbose
Logs all packets of a session.
timer-object
The name of the time range.
default
{
deny
|
permit
}
If no match cases are given, this default
keyword is used to just configure a
permit or deny on all the incoming traffic.
