Table of Contents
Advertisement
Copying Filter Policies
When changes are to be made to an existing filter policy applied to a one or more SAPs/network
interfaces, it is recommended to first copy the applied filter policy, then modify the copy and then
overwrite the applied policy with the modified copy. This ensures that a policy being modified is
not applied when partial changes are done as any filter policy edits are applied immediately to all
services where the policy is applied.
New filter policies can also be created by copying an existing policy and renaming the new filter.
The following displays the command usage to copy an existing IP filter (11) to create a new filter
policy (12) that can then be edited. And once edits are completed, it can be used to overwrite
existing policy (11).
Example
A:ALA-7>config>filter# info
----------------------------------------------
...
...
...
----------------------------------------------
A:ALA-7>config>filter#
7750 SR OS Router Configuration Guide
:
config>filter# copy ip-filter 11 to 12
ip-filter 11 create
description "This is new"
scope exclusive
entry 1 create
match
dst-ip 10.10.10.91/24
src-ip 10.10.10.106/24
exit
action drop
exit
entry 2 create
ip-filter 12 create
description "This is new"
scope exclusive
entry 1 create
match
dst-ip 10.10.10.91/24
src-ip 10.10.10.106/24
exit
action drop
exit
entry 2 create
Filter Policies
Page 469
Advertisement
Table of Contents
