CPM Filter Commands
Page 208 7450 ESS System Mangement Guide
The SYN bit is normally set when the source of the packet wants to initiate a TCP session with the
specified destination IP or IPv6 address.
The no form of the command removes the criterion from the match entry.
Default No match criterion for the SYN bit
Parameters true — Specifies matching on IP or IPv6 packets that have the SYN bit set in the control bits of the
TCP header.
false — Specifies matching on IP or IPv6 packets that do not have the SYN bit set in the control bits
of the TCP header.
renum
Syntax renum old-entry-id new-entry-id
Context config>sys>sec>cpm>ip-filter
config>sys>sec>cpm>mac-filter>entry>match
Description
Description This command renumbers existing IP(IPv4), IPv6, or MAC filter entries to re-sequence filter entries.
This may be required in some cases since the OS exits when the first match is found and execute the
actions according to the accompanying action command. This requires that entries be sequenced cor-
rectly from most to least explicit.
Parameters old-entry-id — Enter the entry number of an existing entry.
Values 1 — 2048
new-entry-id — Enter the new entry-number to be assigned to the old entry.
Values 1 — 2048
shutdown
Syntax shutdown
Context config>sys>sec>cpm>ip-filter
config>sys>sec>cpm>ipv6-filter
config>sys>sec>cpm>mac-filter
Description This command enables IP(v4) or MAC CPM filter.
The no form of this command disable the filter.
Default shutdown
To Next Page
Loading...
