Alcatel-Lucent 7210 SAS E OS System Management Manual page 92

Management Access Filter Commands
entry
[no] entry entry-id
Context config>system>security>mgmt-access-filter
Description This command is used to create or edit a management access filter entry. Multiple entries can be cre-
ated with unique entry-id numbers. The search exits the filter upon the first match found and executes
the actions according to the respective action command. For this reason, entries must be sequenced
correctly from most to least explicit.
An entry may not have any match criteria defined (in which case, everything matches) but must have
at least the keyword action defined to be considered complete. Entries without the action keyword
are considered incomplete and inactive.
The no form of the command removes the specified entry from the management access filter.
Default No entries are defined.
Parameters
entry-id — An entry ID uniquely identifies a match criteria and the corresponding action. It is
protocol
Syntax [no] protocol protocol-id
Context config>system>security>mgmt-access-filter>entry
Description This command configures an IP protocol type to be used as a management access filter match crite-
rion.
The protocol type, such as TCP, UDP, and OSPF, is identified by its respective protocol number.
Well-known protocol numbers include ICMP (1), TCP (6), and UDP (17).
The no form the command removes the protocol from the match criteria.
Default
No protocol match criterion is specified.
Parameters
protocol — The protocol number for the match criterion.
renum
Syntax renum old-entry-number new-entry-number
Context config>system>security>mgmt-access-filter
Description This command renumbers existing management access filter entries to re-sequence filter entries.
Page 92
recommended that entries are numbered in staggered increments. This allows users to insert a
new entry in an existing policy without having to renumber the existing entries.
Values
1 — 9999
Values
1 to 255 (decimal)
7210 SAS-E OS System Management Guide