Ip Filter Entry Commands - Alcatel-Lucent 7210 SAS M Configuration Manual

Configuration Commands

IP Filter Entry Commands

action
Syntax action [drop]
action forward
no action
Context config>filter>ip-filter>entry
Description This command specifies to match packets with a specific IP option or a range of IP options in the first
option of the IP header as an IP filter match criterion. The action keyword must be entered and a
keyword specified in order for the entry to be active.
Multiple action statements entered will overwrite previous actions parameters when defined.
The no form of the command removes the specified action statement. The filter entry is considered
incomplete and hence rendered inactive without the action keyword.
Default
none
Parameters drop — Specifies packets matching the entry criteria will be dropped.
forward — Specifies packets matching the entry criteria will be forwarded.
match
Syntax match [protocol protocol-id]
no match
Context config>filter>ip-filter>entry
Description
This command enables the context to enter match criteria for the filter entry. When the match criteria
have been satisfied the action associated with the match criteria is executed.
If more than one match criteria (within one match statement) are configured then all criteria must be
satisfied (AND function) before the action associated with the match is executed.
A match context may consist of multiple match criteria, but multiple match statements cannot be
entered per entry.
The no form of the command removes the match criteria for the entry-id.
Parameters
protocol — The protocol keyword configures an IP protocol to be used as an IP filter match
Page 130
criterion. The protocol type such as TCP or UDP is identified by its respective protocol number.
7210 SAS M, X Router Configuration Guide