Alcatel-Lucent 7705 SAR-8 System Management Manual page 90

Security Command Reference
entry
Syntax entry entry-id [create]
no entry entry-id
Context config>system>security>cpm-filter>ip-filter
Description This command specifies a particular CPM filter match entry. Every CPM filter must have at least one
filter match entry. A filter entry with no match criteria set will match every packet, and the entry
action will be taken.
The create keyword must be used with every new entry configured. Once the entry has been created,
you can navigate to the entry context without using the create keyword.
For filter entries 1 to 29, the match parameters can be any combination of source IP address/range,
destination IP address/range, source port/range, and destination port/range as long as the accumulated
total of the number of unique records does not exceed 256 combinations.
For filter entries 30 to 64 (extended filter entries), there are no range-based restrictions. As few or as
many match parameters can be specified as required.
Parameters entry-id — identifies a CPM filter entry as configured on this system.
action
Syntax action {accept | drop}
no action
Context config>system>security>cpm-filter>ip-filter>entry
Description
This command specifies the action to take for packets that match this filter entry.
Default
drop
Parameters accept — packets matching the entry criteria will be forwarded
drop — packets matching the entry criteria will be dropped
Page 90
Values 1 to 64
where: 1 to 29 are filter entries
30 to 64 are extended filter entries
7705 SAR OS System Management Guide