CPM Filter Commands
config
7705 SAR OS System Management Guide
— system
—
security
— [no]
cpm-filter
—
default-action
{accept | drop}
—
ip-filter
—
entry
entry-id [create]
— no
entry
entry-id
—
action
— no
action
—
description
— no
description
—
log
log-id
— no
log
—
match
— no
match
—
— no
—
— no
—
— no
—
— no
—
— no
—
— no
—
— no
—
— no
—
— no
—
— no
—
— no
—
— no
—
— no
—
renum
old-entry-id new-entry-id
— [no]
shutdown
{accept | drop}
description-string
[protocol protocol-id]
dscp
dscp-name
dscp
dst-ip
{ip-address/mask | ip-address netmask}
dst-ip
dst-port
tcp/udp port-number [mask]
dst-port
fragment
{true | false}
fragment
icmp-code
icmp-code
icmp-code
icmp-type
icmp-type
icmp-type
ip-option
ip-option-value [ip-option-mask]
ip-option
multiple-option
{true | false}
multiple-option
option-present
{true | false}
option-present
src-ip
{ip-address/mask | ip-address netmask}
src-ip
src-port
src-port-number [mask]
src-port
tcp-ack
{true | false}
tcp-ack
tcp-syn
{true | false}
tcp-syn
Security
Page 71