General Filter Entry Commands - Alcatel-Lucent 7450 Configuration Manual

General Filter Entry Commands

General Filter Entry Commands
entry
Syntax entry entry-id [time-range time-range-name] [create]
no entry entry-id
Context config>filter>dhcp-filter
config>filter>ip-filter
config>filter>ipv6-filter
config>filter>mac-filter
Description This command creates or edits an IP (v4) or MAC filter entry. Multiple entries can be created using
unique entry-id numbers within the filter. Entries must be sequenced from most to least explicit.
An entry may not have any match criteria defined (in which case, everything matches) but must have
at least the keyword action for it to be considered complete. Entries without the action keyword will
be considered incomplete and hence will be rendered inactive.
The no form of the command removes the specified entry from the filter. Entries removed from the
filter are immidately removed from all services or network ports where that filter is applied.
Default none
Parameters entry-id — An entry-id uniquely identifies a match criteria and the corresponding action. It is
time-range time-range-name — Specifies the time range name to be associated with this filter entry
create — Keyword required when first creating the configuration context. Once the context is
chain-to-system-filter
Syntax chain-to-system-filter
no chain-to-system-filter
Context config>filter>ip-filter
config>filter>ipv6-filter
Description This command chains this filter to a currently active system filter. When the filter is chained to the
system filter, the system filter rules are executed first, and the filter rules are only evaluated if no
match on the system filter was found.
Page 516
recommended that multiple entries be given entry-ids in staggered increments. This allows users
to insert a new entry in an existing policy without requiring renumbering of all the existing
entries.
Values 1 — 65535
up to 32 characters in length. The time-range name must already exist in the config>system>cron
context.
created, one can navigate into the context without the create keyword.
7450 ESS Router Configuration Guide