Security
7705 SAR OS System Management Guide 67
IPv6 Management Access Filter Commands
config
—system
— security
— [no] management-access-filter
— ipv6-filter
— default-action {permit | deny | deny-host-unreachable}
— [no] entry entry-id
— action {permit | deny | deny-host-unreachable}
—no action
— description description-string
—no description
— dst-port port [mask]
—no dst-port
— flow-label value
—no flow-label
— [no] log
— [no] next-header next-header
— router router-instance
—no router
— src-ip ipv6-address/prefix-length
—no src-ip
— src-port {port-id | cpm}
—no src-port
— renum old-entry-number new-entry-number
— [no] shutdown
CPM Filter Commands
config
—system
— security
— [no] cpm-filter
— default-action {accept | drop}
— ip-filter
— entry entry-id [create]
—no entry entry-id
— action {accept | drop}
—no action
— description description-string
—no description
— log log-id
—no log
— match [protocol protocol-id]
—no match
— dscp dscp-name
—no dscp
— dst-ip {ip-address/mask | ip-address netmask}
—no dst-ip
— dst-port tcp/udp port-number [mask]