IP Filter Policy Commands
Page 382
config
— filter
—
ip-filter
— no
ip-filter
—
—
— no
—
— no
— no
action
—
option
dhcp-option-number {present | absent}
—
option
dhcp-option-number match hex hex-string [exact] [invert-
match]
—
option
dhcp-option-number match string ascii-string [exact] [invert-
match]
— no
option
filter-id [create]
filter-id
default-action
{drop | forward}
description
description-string
description
entry
entry-id [time-range time-range-name] [create]
entry
entry-id
—
action
[drop]
—
action
forward [next-hop {ip-address | indirect ip-address | interface
ip-int-name}]
—
action
forward [redirect-policy policy-name]
—
action
forward [sap sap-id | sdp sdp-id]
—
action
http-redirect url
—
action
nat
— no
action
—
description
description-string
— no
description
— no
filter-sample
— no
interface-disable-sample
—
log
log-id
— no
log
—
match
[protocol protocol-id]
— no
match
—
dscp
dscp-name
— no
dscp
—
dst-ip
prefix-list-name}
— no
dst-ip
—
dst-port
—
dst-port
— no
dst-port
—
fragment
— no
fragment
—
icmp-code
— no
icmp-code
—
icmp-type
— no
icmp-type
—
ip-option
— no
ip-option
—
multiple-option
— no
multiple-option
—
option-present
— no
option-present
7710 SR OS Router Configuration Guide
{ip-address/mask | ip-address netmask | ip-prefix-list
{lt | gt | eq} dst-port-number
range start end
{true | false}
icmp-code
icmp-type
ip-option-value [ip-option-mask]
{true | false}
{true | false}