Table of Contents
Advertisement
default-action
Syntax
default-action {permit | deny | deny-host-unreachable}
Context
config>system>security>management-access-filter>ip-filter
config>system>security>management-access-filter>ipv6-filter
Description
This command creates the default action for management access in the absence of a specific
management access filter match.
The default-action is applied to a packet that does not satisfy any match criteria in any of the
management access filters. Whenever management access filters are configured, the default-action
must be defined.
Default
n/a
Parameters
permit — specifies that packets not matching the configured selection criteria in any of the filter
deny — specifies that packets not matching the selection criteria will be denied
deny-host-unreachable — specifies that packets not matching the selection criteria will be
entry
Syntax
[no] entry
Context
config>system>security>management-access-filter>ip-filter
config>system>security>management-access-filter>ipv6-filter
Description
This command is used to create or edit a management access filter entry. Multiple entries can be
created with unique entry-id numbers. The 7705 SAR exits the filter upon the first match found and
executes the actions according to the respective action command. For this reason, entries must be
sequenced correctly from most to least explicit.
An entry may not have any match criteria defined (in which case, everything matches) but must have
at least the keyword action defined to be considered complete. Entries without the action keyword are
considered incomplete and inactive.
The no form of the command removes the specified entry from the management access filter.
Default
n/a
Parameters
entry-id — an entry ID uniquely identifies a match criteria and the corresponding action. It is
7705 SAR OS System Management Guide
entries will be permitted
denied and a host unreachable message will be issued
recommended that entries be numbered in staggered increments. This allows users to insert a
new entry in an existing policy without having to renumber the existing entries.
Values
1 to 9999
Security
83
Advertisement
Table of Contents
