Filter Policies
Router Configuration Guide 597
Copying Filter Policies
When changes are to be made to an existing filter policy applied to a one or more SAPs/
network interfaces, it is recommended to first copy the applied filter policy, then modify the
copy and then overwrite the applied policy with the modified copy. This ensures that a policy
being modified is not applied when partial changes are done as any filter policy edits are
applied immediately to all services where the policy is applied.
New filter policies can also be created by copying an existing policy and renaming the new
filter.
The following displays the command usage to copy an existing IP filter (11) to create a new
filter policy (12) that can then be edited. And once edits are completed, it can be used to
overwrite existing policy (11).
Example: config>filter# copy ip-filter 11 to 12
A:ALA-7>config>filter# info
----------------------------------------------
...
ip-filter 11 create
description "This is new"
scope exclusive
entry 1 create
match
dst-ip 10.10.10.91/24
src-ip 10.10.10.106/24
exit
action drop
exit
entry 2 create
...
ip-filter 12 create
description "This is new"
scope exclusive
entry 1 create
match
dst-ip 10.10.10.91/24
src-ip 10.10.10.106/24
exit
action drop
exit
entry 2 create
...
----------------------------------------------
A:ALA-7>config>filter#
To Next Page
Loading...
