Filter Policies
Router Configuration Guide 531
active — Specifies that embedded filter entries are to be included in this embedding filter policy
and activated on applicable line cards – default if no keyword is specified and omitted in info
command (but not info detail), or when saving configuration.
inactive — Specifies that no embedded filter policy entries are to be included in this embedding
filter policy. The embedding is configured but will not do anything.
filter-name
Syntax filter-name filter-name
no filter-name
Context config>filter>ip-filter
config>filter>ipv6-filter
config>filter>mac-filter
Description This command configures filter-name attribute of a given filter. filter-name, when configured, can be
used instead of filter ID to reference the given policy in the CLI.
Default no filter-name
Parameters filter-name — A string of up to 64 characters uniquely identifying this filter policy.
The following restrictions apply to the filter-name:
– Policy names may not begin with a number (0-9).
– Policy names may not begin with the underscore “_” character (e.g. _myPolicy). Names that
start with underscore are reserved for system generated names.
– “fSpec-x” (where x is any number) cannot be used as a user defined filter name.
scope
Syntax scope {exclusive | template | embedded | system}
scope {exclusive | template}
no scope
Context config>filter>ip-filter
config>filter>ipv6-filter
config>filter>mac-filter
Description This command configures the filter policy scope as exclusive, template, embedded or system.
The scope of the policy cannot be changed when:
• the scope is template and the policy is applied to one or more services or network interfaces
• the scope is embedded and the policy is embedded by another policy
Changing the scope to/from system is only allowed when a policy is not active and the policy has no
entries configured.
To Next Page
Loading...
