Security
7450 ESS System Mangement Guide Page 199
Context config>system>security>cpm-filter
Description This command enables the context to configure CPM MAC-filter parameters.
Default shutdown
entry
Syntax entry entry-id
Context config>sys>sec>cpm>ip-filter
config>sys>sec>cpm>mac-filter
Description This command specifies a particular CPM filter match entry. Every CPM filter must have at least one
filter match entry. Entries are created and deleted by user.
The default match criteria is match none.
Parameters entry-id — Identifies a CPM filter entry as configured on this system.
Values 1 — 2048
Description
log
Syntax log log-id
Context config>sys>sec>cpm>ip-filter>entry
config>sys>sec>cpm>mac-filter>entry
Description This command specifies the log in which packets matching this entry should be entered. The value
zero indicates that logging is disabled.
The no form of the command deletes the log ID.
Parameters log-id — Specifies the log ID where packets matching this entry should be entered.
match
Syntax match [protocol protocol-id]
no match
Context config>sys>sec>cpm>ip-filter>entry
Description This command enables the context to enter match criteria for the filter entry. When the match criteria
have been satisfied the action associated with the match criteria is executed. If more than one match
criteria (within one match statement) are configured then all criteria must be satisfied (AND function)
before the action associated with the match is executed.