Alcatel-Lucent OmniAccess 700, Руководство по настройке CLI

Страница: 681 / 1193

Filter Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
655
Alcatel-Lucent
Beta Beta
CLI Configuration Guide
F
ILTER
C
ONFIGURATION
C
OMMANDS
The following steps are used to configure a filter on the OA-700:
T
O
C
REATE A
F
ILTER
E
XAMPLE
ALU(config)# ip filter f1
ALU(config-filter-f1)#
T
O
C
ONFIGURE A
R
ULE FOR A
F
ILTER
Note: The ‘ reset’ keyword can be used in conjunction only with the “ deny ” keyword.
Command (in CM) Description
ip filter <name>
This command configures a filter.
Command (in FCM) Description
[< 1-65535 >] match [ any | all ]
<match-list name>...
{ permit | deny [ reset ]}[ log ]
[ verbose ] [ timer <timer-
object> ]
This command is used to configure rules
(associate match-lists and set priority for
the rule) for a filter, and also set the
action deny or permit for the configured
rules.
By default, ‘any’ keyword is used.
The range for the rule number is 1-
65535. This rule number signifies the
priority of a rule. By default, the
numbering pattern for rule number is the
next multiple of ten to the highest existing
rule number.
Reset: Use this keyword to send a reset
packet to the sender.
Log: Use this keyword to log the packet
information.
Verbose : This logs all packets of a
session.
Timer object : The name of the time
range.
default { deny | permit }[ log ]
[ verbose ]
This command sets an action of either
permit or deny on the filter.
The default action for a filter is
“deny”.