Alcatel-Lucent 7705 SAR-8 System Management Manual page 83

Management Access Filter Commands
management-access-filter
Syntax [no] management-access-filter
Context config>system>security
Description This command creates the context to edit management access filters and to reset match criteria.
Management access filters control all traffic in and out of the
management of the 7705 SAR by other nodes outside either specific (sub)networks or through
designated ports.
Management filters, as opposed to other traffic filters, are enforced by system software.
The no form of the command removes management access filters from the configuration.
Default No management access filters are defined.
ip-filter
Syntax ip-filter
Context config>system>security>management-access-filter
Description
This command creates the context to configure IP filter commands.
default-action
Syntax default-action {permit | deny | deny-host-unreachable}
Context config>system>security>management-access-filter>ip-filter
Description This command creates the default action for management access in the absence of a specific
management access filter match.
The default-action is applied to a packet that does not satisfy any match criteria in any of the
management access filters. Whenever management access filters are configured, the default-action
must be defined.
Default No default action is defined.
Parameters permit — specifies that packets not matching the configured selection criteria in any of the filter
deny — specifies that packets not matching the selection criteria will be denied
7705 SAR OS System Management Guide
entries will be permitted
CSM
. They can be used to restrict
Security
Page 83