Alcatel-Lucent OmniAccess 700, Руководство по настройке CLI

Страница: 711 / 1193

Network Attack Prevention Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
685
Alcatel-Lucent
Beta Beta
CLI Configuration Guide
E
XAMPLE
In the following example, the attack object atk is configured to drop all the attacks:
ALU(config-firewall-P1)# 10 match m1 attack atk drop
In the following example, the attack object atk is configured to drop all the attacks
and send acknowledgement such as an error report.
ALU(config-firewall-P1)# match m1 attack atk reset
T
O
R
EORDER
T
HE
R
ULES
I
N
T
HE
F
IREWALL
P
OLICY
E
XAMPLE
Consider the following configuration:
ALU(config)# firewall
ALU(config-firewall)# policy P1
ALU(config-firewall-P1)#
10 match m1 permit
20 match m2 deny log
30 match m3 permit
40 match m4 deny reset
In the above sequence, if m4 has a priority 40. Use the “change “ keyword to
change the priority of m4.
ALU(config-firewall)# policy P1
ALU(config-firewall-P1)# change 40 15
To view the policy configuration after changing the priority, give the show
command. The output appears as shown:
show firewall policy P1
ip policy P1
10 match m1 permit
15 match m4 deny reset
20 match m2 deny log
30 match m3 permit
Now, to generate a numbering scheme with a proper order, use the keyword
“
renumber ” as follows:
ALU(config-firewall)# policy P1
ALU(config-firewall-P1)# renumber
Command (in F-PCM) Description
renumber
Use this command to generate a
numbering scheme for the firewall
policy rules configured.
change {< 1-65535 > < 1-65535> }
Use this command to change the
priority of a specific firewall policy
rule configured.