THOMSON SpeedTouch 608, Cli Reference Manual

Page: 287 / 490

285
IPSec Commands
E-DOC-CTC-20040216-0002 v1.0
ipsec policy assign
Assign a chain to a hook. A hook (also called Packet Interception Point (PIP) or entry point) is the location where
packets are intercepted to be compared against a chain of rules.
SYNTAX:
where:
RELATED COMMANDS:
ipsec policy assign hook = <{input|output}>
chain = <string>
hook The hook's name to assign a chain to.
Choose between:
•
input:
The point off incoming traffic.
At this point it can be determined whether the packet is
allowed to reach the SpeedTouch™ IP router or local host.
•
output:
The point off outgoing traffic.
At this point it can be determined whether the packet is
allowed to leave the SpeedTouch™ IP router or local host.
REQUIRED
chain The name of the chain to use. REQUIRED
ipsec policy list Show a list of all hooks.
ipsec policy unassign Unassign all chains from a hook.