Ip Filter Entry Commands - Alcatel 7710 SR OS Configuration Manual

Configuration Commands

IP Filter Entry Commands

action
Syntax action [drop]
action forward [next-hop {ip-address | indirect ip-address | interface ip-int-name}]
action forward [redirect-policy policy-name]
action forward [sap sap-id | sdp sdp-id]
action http-redirect url
action nat
no action
Context config>filter>ip-filter>entry
Description
This command specifies to match packets with a specific IP option or a range of IP options in the first
option of the IP header as an IP filter match criterion. The action keyword must be entered and a
keyword specified in order for the entry to be active.
Note that action forward next-hop cannot be applied to multicast traffic.
Multiple action statements entered will overwrite previous actions parameters when defined.
The no form of the command removes the specified action statement. The filter entry is considered
incomplete and hence rendered inactive without the action keyword.
Default
none
Parameters
drop — Specifies packets matching the entry criteria will be dropped.
forward — Specifies packets matching the entry criteria will be forwarded.
next-hop ip-address — The IP address of the direct next-hop to which to forward matching packets
indirect ip-address — The IP address of the indirect next-hop to which to forward matching packets
interface ip-int-name — The name of the egress IP interface where matching packets will be
redirect policy-name — Specifies the redirect policy configured in the config>filter>redirect-
policy context.
Page 382
If neither drop nor forward is specified, the filter action is No-Op and the filter entry is inactive.
in dotted decimal notation.
in dotted decimal notation. The direct next-hop IP address and egress IP interface are determined
by a route table lookup.
If the next hop is not available, then a routing lookup will be performed and if a match is found
the packet will be forwarded to the result of that lookup. If no match is found a "ICMP
destination unreachable" message is send back to the origin.
forwarded from. This parameter is only valid for unnumbered point-to-point interfaces. If the
string contains special characters (#, $, spaces, etc.), the entire string must be enclosed within
double quotes.
7710 SR OS Router Configuration Guide