Security
7705 SAR OS System Management Guide Page 89
CPM Filter Commands
cpm-filter
Syntax [no] cpm-filter
Context config>system>security
Description This command enables the context to configure a CPM filter. A CPM filter is a hardware filter on the
CSM that applies to all the traffic going to the CSM CPU. It can be used to drop or accept packets, as
well as allocate dedicated hardware queues for the traffic. The hardware queues are not user-
configurable.
The no form of the command disables the CPM filter.
default-action
Syntax default-action {accept | drop}
Context config>system>security>cpm-filter
Description This command specifies the action to be applied to packets when the packets do not match the
specified criteria in all of the IP filter entries of the filter. If there are no filter entries defined, the
packets received will either be accepted or dropped based on that default action.
Default accept
Parameters accept — packets are accepted unless there is a specific filter entry that causes the packet to be
dropped
drop — packets are dropped unless there is a specific filter entry that causes the packet to be accepted
ip-filter
Syntax ip-filter
Context config>system>security>cpm-filter
Description This command enables the context to configure CPM IP filter parameters.
To Next Page
Loading...
