Security Command Reference
90 7705 SAR OS System Management Guide
CPM Filter Commands
cpm-filter
Syntax [no] cpm-filter
Context config>system>security
Description This command enables the context to configure a CPM (referred to as CSM on the 7705 SAR) filter.
A CPM filter is a hardware filter (that is, implemented on the network processor) for the CSM-destined
traffic that applies to all the traffic destined for the CSM CPU. It can be used to drop or accept packets,
as well as allocate dedicated hardware queues for the traffic. The hardware queues are not user-
configurable.
The no form of the command disables the CPM filter.
default-action
Syntax default-action {accept | drop}
Context config>system>security>cpm-filter
Description This command specifies the action to be applied to packets when the packets do not match the specified
criteria in all of the IP filter entries of the filter. If there are no filter entries defined, the packets received
will either be accepted or dropped based on that default action.
Default accept
Parameters accept — packets are accepted unless there is a specific filter entry that causes the packet to be
dropped
drop — packets are dropped unless there is a specific filter entry that causes the packet to be
accepted
ip-filter
Syntax ip-filter
Context config>system>security>cpm-filter
Description This command enables the context to configure IPv4 CPM filter parameters.
To Next Page
Loading...
