General filter entry commands, Entry – Alcatel-Lucent 7750 SR OS User Manual

Page 364

Advertising
background image

Page 364

7750 SR OS Router Configuration Guide

General Filter Entry Commands

entry

Syntax

entry entry-id [time-range time-range-name]
no entry entry-id

Context

config>filter>ip-filter
config>filter>ipv6-filter
config>filter>mac-filter

Description

This command creates or edits an IP, IPv6, or MAC filter entry. Multiple entries can be created using
unique entry-id numbers within the filter. The 7750 SR OS implementation exits the filter on the first
match found and executes the actions in accordance with the accompanying action command. For
this reason, entries must be sequenced correctly from most to least explicit.

An entry may not have any match criteria defined (in which case, everything matches) but must have
at least the keyword action for it to be considered complete. Entries without the action keyword will
be considered incomplete and hence will be rendered inactive.

The no form of the command removes the specified entry from the IP or MAC filter. Entries removed
from the IP or MAC filter are immediately removed from all services or network ports where that
filter is applied.

Default

none

Parameters

entry-id — An entry-id uniquely identifies a match criteria and the corresponding action. It is

recommended that multiple entries be given entry-ids in staggered increments. This allows users
to insert a new entry in an existing policy without requiring renumbering of all the existing
entries.

Values

1 — 65535

time-range time-range-nameSpecifies the time range name to be associated with this filter entry

up to 32 characters in length. The time-range name must already exist in the config>cron
context.

create — Keyword required when first creating the configuration context. Once the context is

created, one can navigate into the context without the create keyword.

log

Syntax

log log-id
no log

Context

config>filter>ip-filter>entry
config>filter>ipv6-filter>entry
config>filter>mac-filter>entry

Description

This command creates the context to enable filter logging for a filter entry and specifies the
destination filter log ID.

Advertising