Alcatel-Lucent 7705 SAR-8 - Page 52

Security Configuration Procedures
Page 52 7705 SAR OS System Management Guide
no shutdown
entry entry-id
description description-string
src-port {port-id cpm}
src-ip {ip-prefix/mask | ip-prefix
netmask}
protocol protocol-id
router {router-instance}
dst-port port [mask]
action {permit | deny | deny-host-
unreachable}
log
The following displays an example of the management access filter command usage.
Example: config>system>security# management-access-filter
security>mgmt-access-filter# ip-filter default-action
deny
security>mgmt-access-filter# ip-filter entry 1
security>mgmt-access-filter>entry# mgmt-access-
filter>ip-filter>entry# src-ip 10.10.10.104/32
security>mgmt-access-filter>ip-filter>entry# exit
security>mgmt-access-filter>ip-filter# entry 2
security>mgmt-access-filter>ip-filter>entry# mgmt-access-
filter>entry# src-ip 10.10.10.1/32
security>mgmt-access-filter>ip-filter>entry# exit
The following example displays the management access filter configuration.
ALU-1>config>system>security# info
----------------------------------------------
management-access-filter
ip-filter
default-action deny
entry 1
action permit
src-ip 10.10.10.104/32
exit
entry 2
action permit
src-ip 10.10.0.1/32
exit
exit
snmp
community "private" rwa version both
exit
----------------------------------------------
ALU-1>config>system>security#