Alcatel-Lucent 7210 SAS E OS System Management Manual page 91

Description
This command creates the default action for management access in the absence of a specific manage-
ment access filter match.
The default-action is applied to a packet that does not satisfy any match criteria in any of the man-
agement access filters. Whenever management access filters are configured, the default-action must
be defined.
Default
No default-action is defined.
Parameters
permit — Specifies that packets not matching the configured selection criteria in any of the filter
deny — Specifies that packets not matching the selection criteria be denied.
deny-host-unreachable — Specifies that packets not matching the selection criteria be denied and a
dst-port
Syntax [no] dst-port value [mask]
Context config>system>security>mgmt-access-filter>entry
Description
This command configures a source TCP or UDP port number or port range for a management access
filter match criterion.
The no form of the command removes the source port match criterion.
Default
No src-port match criterion.
Parameters value — The source TCP or UDP port number as match criteria.
mask — Mask used to specify a range of source port numbers as the match criterion.
7210 SAS-E OS System Management Guide
entries will be permitted.
host unreachable message will be issued.
Values
1 — 65535 (decimal)
This 16 bit mask can be configured using the following formats:
Format Style
Decimal
Hexadecimal
Binary
To select a range from 1024 up to 2047, specify 1024 0xFC00 for value and mask.
Default 65535 (exact match)
Values
1 — 65535 (decimal)
Format Syntax
DDDDD
0xHHHH
0bBBBBBBBBBBBBBBBB
Example
63488
0xF800
0b1111100000000000
Security
Page 91