Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 692 / 1193

Filter and Firewall
Left running head:
Chapter name (automatic)
666
Beta Beta
CLI Configuration Guide
Alcatel-Lucent
U
PDATIONS
The numbering pattern employed by default in the OA-700 is multiples of ten. If a
new rule has to be included in between two existing rules, without actually
changing the sequence of numbering, use the “
renumber ” keyword.
To change the line number of a pre-defined rule, use the “ change ” keyword. This
allows you to just change the line number and not to swap between two numbers.
Note: Line numbers will not be shown unless you specifically type them in. You can view the
line numbers only in “
show ” commands.
T
O
N
ORMALIZE
L
INE
N
UMBERS
Use the keyword “renumber” to normalize the line numbers of each rule and set
them to the consecutive multiples of 10.
E
XAMPLE
Consider the following configuration:
ip filter f1
10 match m1 permit
15 match m4 deny reset
20 match m2 deny log
30 match m3 permit
stateless
Here the numbers does not follow the specified order. This becomes more
complex when you try to enter another match in between 10 and 15. This creates
ambiguity in the flow and in prioritizing the rules. Hence after the insertion of any
specific rule, the ordering can be set back to its original manner with the help of
the keyword “
renumber ”.
ip filter f1
renumber
To view the filter configuration after renumbering, give the show command.
show ip filter f1
ip filter f1
10 match m1 permit
20 match m4 deny reset
30 match m2 deny log
40 match m3 permit
stateless