Alcatel-Lucent 7450 - Configuring IP CPM Filters Policy

Security
7450 ESS System Mangement Guide Page 75
Configuring IP CPM Filters Policy
Use the following CLI commands to configure a CPM filter.
|ip-prefix-list prefix-list-name(10.0r4)mac-filter
renum <old-entry-id> new-entry-id
[no] shutdown
[no] entry <entry-id> [create]
[no] action accept | drop | queue queue-id
[no] description description-string
[no] log log-id
[no] match [frame-type frame-type]
[no] cfm-opcode range start end | {lt|gt|eq}
opcode
[no] dsap dsap-value [dsap-mask]
[no] dst-mac ieee-address [ieee-address-mask]
[no] etype 0x0600..0xffff
[no] src-mac ieee-address [ieee-address-mask]
[no] ssap ssap-value [ssap-mask]
[no] svc-id service-id
The following displays an CPM filter configuration example:
*A:Dut-C>config>sys>security>cpm-filter# info
ip-filter
shutdown
entry 100 create
action queue 50
log 110
match protocol icmp
fragment true
icmp-type dest-unreachable
icmp-code host-unreachable
multiple-option false
option-present true
src-ip 192.100.2.0/24
exit
exit
exit
mac-filter
shutdown
entry 40 create
action accept
log 101
match frame-type ethernet_II
svc-id 12
dst-mac 00:03:03:03:01:01 ff:ff:ff:ff:ff:ff
etype 0x8902
cfm-opcode gt 100
exit
exit
exit
*A:Dut-C>config>sys>security>cpm-filter#