Filter Policies
Router Configuration Guide 573
Description This command copies existing filter list entries for a specific filter ID to another filter ID. The copy
command is a configuration level maintenance tool used to create new filters using existing filters. It
also allows bulk modifications to an existing policy with the use of the overwrite keyword.
If overwrite is not specified, an error will occur if the destination policy ID exists.
Parameters ip-filter — Indicates that the src-filter-id and the dst-filter-id are IPv4 filter IDs.
ipv6-filter — This keyword indicates that the src-filter-id and the dst-filter-id are IPv6 filter IDs.
mac-filter — Indicates that the src-filter-id and the dst-filter-id are MAC filter IDs.
src-filter-id — The src-filter-id identifies the source filter policy from which the copy command
will attempt to copy. The filter policy must exist within the context of the preceding keyword
(ip-filter, ipv6-filter or mac-filter).
dst-filter-id — The dst-filter-id identifies the destination filter policy to which the copy command
will attempt to copy. If the overwrite keyword does not follow, the filter policy ID cannot
already exist within the system for the filter type the copy command is issued for. If the
overwrite keyword is present, the destination policy ID may or may not exist.
overwrite — The overwrite keyword specifies that the destination filter ID may exist. If it does,
everything in the existing destination filter ID will be completely overwritten with the
contents of the source filter ID. If the destination filter ID exists, either overwrite must be
specified or an error message will be returned. If overwrite is specified, the function of
copying from source to destination occurs in a ‘break before make’ manner and therefore
should be handled with care.
renum
Syntax renum old-entry-id new-entry-id
Context config>filter>ip-filter
config>filter>ipv6-filter
config>filter>mac-filter
Description This command renumbers existing MAC or IPv4/IPv6 filter entries to properly sequence filter entries.
This may be required in some cases since the OS exits when the first match is found and executes the
actions according to the accompanying action command. This requires that entries be sequenced
correctly from most to least explicit.
Parameters old-entry-id — Enter the entry number of an existing entry, as a decimal integer.
Values 1 to 65535
new-entry-id — Enter the new entry-number to be assigned to the old entry, as a decimal integer.
Values 1 to 65535
To Next Page
Loading...
