Management Access Filter Commands
Page 132 7450 ESS System Mangement Guide
Parameters value — The source TCP or UDP port number as match criteria.
Values 1 — 65535 (decimal)
mask — Mask used to specify a range of source port numbers as the match criterion.
This 16 bit mask can be configured using the following formats:
To select a range from 1024 up to 2047, specify 1024 0xFC00 for value and mask.
Default 65535 (exact match)
Values 1 — 65535 (decimal)
entry
Syntax [no] entry entry-id
Context config>system>security>mgmt-access-filter>ip-filter
config>system>security>mgmt-access-filter>mac-filter
Description This command is used to create or edit a management access IP(v4), IPv6, or MAC filter entry. Mul-
tiple entries can be created with unique entry-id numbers. The OS exits the filter upon the first match
found and executes the actions according to the respective action command. For this reason, entries
must be sequenced correctly from most to least explicit.
An entry may not have any match criteria defined (in which case, everything matches) but must have
at least the keyword action defined to be considered complete. Entries without the action keyword
are considered incomplete and inactive.
The no form of the command removes the specified entry from the management access filter.
Default No entries are defined.
Parameters entry-id — An entry ID uniquely identifies a match criteria and the corresponding action. It is
recommended that entries are numbered in staggered increments. This allows users to insert a
new entry in an existing policy without having to renumber the existing entries.
Values 1 — 9999
log
Syntax [no] log
Format Style Format Syntax Example
Decimal
DDDDD 63488
Hexadecimal
0xHHHH 0xF800
Binary
0bBBBBBBBBBBBBBBBB 0b1111100000000000
To Next Page
Loading...
