General Filter Entry Commands - Alcatel-Lucent 7710 SR OS Configuration Manual

General Filter Entry Commands

entry
Syntax
Context
Description
Default
Parameters
log
Syntax
Context
Description
Page 398
entry entry-id [time-range time-range-name] [create]
no entry entry-id
config>filter>dhcp-filter
config>filter>ip-filter
config>filter>ipv6-filter
config>filter>mac-filter
This command creates or edits an IP (v4), IPv6, or MAC filter entry. Multiple entries can be created
using unique entry-id numbers within the filter. Entries must be sequenced from most to least
explicit.
An entry may not have any match criteria defined (in which case, everything matches) but must have
at least the keyword action for it to be considered complete. Entries without the action keyword will
be considered incomplete and hence will be rendered inactive.
The no form of the command removes the specified entry from the filter. Entries removed from the
filter are immidately removed from all services or network ports where that filter is applied.
none
entry-id — An entry-id uniquely identifies a match criteria and the corresponding action. It is
recommended that multiple entries be given entry-ids in staggered increments. This allows users
to insert a new entry in an existing policy without requiring renumbering of all the existing
entries.
Values
1 — 65535
time-range time-range-name — Specifies the time range name to be associated with this filter entry
up to 32 characters in length. The time-range name must already exist in the config>cron
context.
create — Keyword required when first creating the configuration context. Once the context is
created, one can navigate into the context without the create keyword.
log log-id
no log
config>filter>ip-filter>entry
config>filter>ipv6-filter>entry
config>filter>mac-filter>entry
This command creates the context to enable filter logging for a filter entry and specifies the
7710 SR OS Router Configuration Guide