Security
7705 SAR OS System Management Guide Page 83
Management Access Filter Commands
management-access-filter
Syntax [no] management-access-filter
Context config>system>security
Description This command creates the context to edit management access filters and to reset match criteria.
Management access filters control all traffic in and out of the
CSM. They can be used to restrict
management of the 7705 SAR by other nodes outside either specific (sub)networks or through
designated ports.
Management filters, as opposed to other traffic filters, are enforced by system software.
The no form of the command removes management access filters from the configuration.
Default No management access filters are defined.
ip-filter
Syntax ip-filter
Context config>system>security>management-access-filter
Description This command creates the context to configure IP filter commands.
default-action
Syntax default-action {permit | deny | deny-host-unreachable}
Context config>system>security>management-access-filter>ip-filter
Description This command creates the default action for management access in the absence of a specific
management access filter match.
The default-action is applied to a packet that does not satisfy any match criteria in any of the
management access filters. Whenever management access filters are configured, the default-action
must be defined.
Default No default action is defined.
Parameters permit — specifies that packets not matching the configured selection criteria in any of the filter
entries will be permitted
deny — specifies that packets not matching the selection criteria will be denied
To Next Page
Loading...
