Alcatel-Lucent 7750 SR-OS, Руководство по настройке

Страница: 494 / 674

General Filter Entry Commands
Page 494 7750 SR OS Router Configuration Guide
General Filter Entry Commands
entry
Syntax entry entry-id [ time-range time-range-name ] [ create ]
no entry entry-id
Context config>filter>dhcp-filter
config>filter>ip-filter
config>filter>ipv6-filter
config>filter>mac-filter
Description This command creates or edits an IP (v4), IPv6, or MAC filter entry. Multiple entries can be created
using unique entry-id numbers within the filter. Entries must be sequenced from most to least
explicit.
An entry may not have any match criteria defined (in which case, everything matches) but must have
at least the keyword
action for it to be considered complete. Entries without the action keyword will
be considered incomplete and hence will be rendered inactive.
The no form of the command removes the specified entry from the filter. Entries removed from the
filter are immidately removed from all services or network ports where that filter is applied.
Default none
Parameters entry-id — An entry-id uniquely identifies a match criteria and the corresponding action. It is
recommended that multiple entries be given entry-ids in staggered increments. This allows users
to insert a new entry in an existing policy without requiring renumbering of all the existing
entries.
Values 1 — 65535
time-range time-range-name — Specifies the time range name to be associated with this filter entry
up to 32 characters in length. The time-range name must already exist in the config>cron
context.
create — Keyword required when first creating the configuration context. Once the context is
created, one can navigate into the context without the create keyword.
log
Syntax log log-id
no log
Context config>filter>ip-filter>entry
config>filter>ipv6-filter>entry
config>filter>mac-filter>entry
Description This command creates the context to enable filter logging for a filter entry and specifies the