Filter and Firewall
Left running head:
Chapter name (automatic)
616
Beta
Beta
OmniAccess 700 CLI Command Reference Guide
Alcatel-Lucent
POLICY
policy
<
name>
D
ESCRIPTION
Enter this command in the Firewall Configuration mode. This command is used to
configure a firewall policy. This enters the firewall policy sub-configuration mode
P
ARAMETERS
E
XAMPLE
The following example depicts firewall policy configuration:
ALU(config-firewall)# policy P1
ALU(config-firewall-P1)#
To Create a DoS Rule Inside a Firewall Policy
[<
1-65535
>]
match
[
any
|
all
]
<match-list name>... attack
<name>
{
drop
|
reset
} [
time-range
<
name
>]
Enter this command in the Firewall Policy Configuration mode. This command is
used to attach an attack object to a firewall policy.
In the following example, the attack object
atk
is configured to drop all the attacks:
ALU(config-firewall-P1)# match m1 attack atk drop
In the following example, the attack object
atk
is configured to drop all the attacks
and send acknowledgement such as an error report.
ALU(config-firewall-P1)# match m1 attack atk reset
Parameter
Description
name
Name of the firewall policy to be configured.
Parameter
Description
1-65535
Denotes the firewall policy rule number.
The range for the filter rule.
match-list name
Name of the match-list.
attack
<
name>
Name of the attack.
drop
The keyword “
drop
” drops the packets.
reset
The keyword "reset" drops the packets
but sends an error message or an
acknowledgement to the sender.
time-range <name>
The name of the time range.
