Table of Contents
Advertisement
log
Syntax
log log-id
Context
config>sys>sec>cpm>ip-filter>entry
config>sys>sec>cpm>ipv6-filter>entry
config>sys>sec>cpm>mac-filter>entry
Description
This command specifies the log in which packets matching this entry should be entered. The value
zero indicates that logging is disabled.
The no form of the command deletes the log ID.
Parameters
log-id — Specifies the log ID where packets matching this entry should be entered.
match
Syntax
match [protocol protocol-id]
no match
Context
config>sys>sec>cpm>ip-filter>entry
Description
This command enables the context to enter match criteria for the filter entry. When the match criteria
have been satisfied the action associated with the match criteria is executed. If more than one match
criteria (within one match statement) are configured then all criteria must be satisfied (AND function)
before the action associated with the match is executed.
A match context may consist of multiple match criteria, but multiple match statements cannot be
entered per entry.
The no form of the command removes the match criteria for the entry-id.
Parameters
protocol — Configures an IP protocol to be used as an IP filter match criterion. The protocol type
protocol-id — Configures the decimal value representing the IP protocol to be used as an IP filter
7950 SR OS System Management Guide
such as TCP or UDP is identified by its respective protocol number.
match criterion. Well known protocol numbers include ICMP(1), TCP(6), UDP(17). The no form
the command removes the protocol from the match criteria.
Values
1 — 255 (values can be expressed in decimal, hexidecimal, or binary)
keywords - none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp, idrp, igmp, igp,
ip, ipv6, ipv6-frag, ipv6-icmp, ipv6-no-nxt, ipv6-opts, ipv6-route, isis, iso-ip, l2tp,
ospf-igp, pnni, ptp, rdp, rsvp, stp, tcp, udp, vrrp , * — udp/tcp wildcard
Table 8: IP Protocol Names
Protocol
Protocol ID
icmp
1
igmp
2
ip
4
Description
Internet Control Message
Internet Group Management
IP in IP (encapsulation)
Security
Page 173
Advertisement
Table of Contents
