Security
7705 SAR OS System Management Guide Page 137
Sample Output
A:ALU-35# show system security cpm-filter ip-filter
===============================================================================
CPM IP Filters
===============================================================================
Entry-Id Dropped Forwarded Description
-------------------------------------------------------------------------------
2 0 0 CPM filter #2
3 25880 0 CPM filter #3
4 25880 0 CPM filter #4
5 25882 0 CPM filter #5
6 25926 0 CPM filter #6
7 25926 0 CPM filter #7
8 25944 0 CPM filter #8
9 25950 0 CPM filter #9
10 25968 0 CPM filter #10
11 25984 0 CPM filter #11
12 26000 0 CPM filter #12
13 26018 0 CPM filter #13
14 26034 0 CPM filter #14
15 26050 0 CPM filter #15
===============================================================================
A:ALU-35#
Fragment The 3-bit fragment flags or 13-bit fragment offset field
IP-Option The IP option setting
TCP-syn The SYN flag in the TCP header
Match action When the criteria matches, displays drop or forward packet
Dropped pkts The number of matched dropped packets
Src. Port The source port number (range)
Dest. Port The destination port number (range)
Dscp The DSCP field in the IP header
ICMP Code The ICMP code field in the ICMP header
Option-present The option present setting
Multiple Option The multiple option setting
TCP-ack The ACK flag in the TCP header
Match action When the criteria matches, displays drop or forward packet
Next Hop If match action is forward, indicates destination of the matched packet
Forwarded pkts Indicates number of matched forwarded packets
Table 10: Show CPM Filter Output Fields (Continued)
Label Description