Security
7705 SAR OS System Management Guide Page 91
log
Syntax log log-id
no log
Context config>system>security>cpm-filter>ip-filter>entry
Description This command specifies the log in which packets matching this entry should be entered. The value 0
indicates that logging is disabled.
The no form of the command deletes the log ID.
Parameters log-id — the log ID where packets matching this entry should be entered
Values 101 to 199
match
Syntax match [protocol protocol-id]
no match
Context config>system>security>cpm-filter>ip-filter>entry
Description This command enables the context to enter match criteria for the filter entry. When the match criteria
have been satisfied, the action associated with the match criteria is executed.
If more than one match criterion (within one match statement) are configured, all criteria must be
satisfied (AND function) before the action associated with the match is executed.
A match context may consist of multiple match criteria, but multiple match statements cannot be
entered per entry.
The no form of the command removes the match criteria for the entry-id.
Parameters protocol — configures an IP protocol to be used as an IP filter match criterion. The protocol type
such as TCP or UDP is identified by its respective protocol number.
protocol-id — configures the decimal value representing the IP protocol to be used as an IP filter
match criterion. Common protocol numbers include ICMP(1), TCP(6), UDP(17). The no form
the command removes the protocol from the match criteria. See
Table 6 for the protocol IDs and
descriptions for the IP protocols.
Values 0 to 255 (values can be expressed in decimal, hexadecimal, or binary – DHB)
keywords - none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp, idrp, igmp, igp,
ip, ipv6, ipv6-frag, ipv6-icmp, ipv6-no-nxt, ipv6-opts, ipv6-route, isis, iso-ip, l2tp,
ospf-igp, pim, pnni, ptp, rdp, rsvp, stp, tcp, udp, vrrp
* — udp/tcp wildcard
To Next Page
Loading...
