Filter Command Reference
342 7705 SAR OS Router Configuration Guide
General Filter Entry Commands
entry
Syntax entry entry-id [create]
no entry entry-id
Context config>filter>ip-filter
config>filter>ipv6-filter
config>filter>mac-filter
config>filter>vlan-filter
Description This command creates or edits a filter entry. Multiple entries can be created using unique entry-id
numbers within the filter. The 7705 SAR implementation exits the filter on the first match found and
executes the actions in accordance with the accompanying action command. For this reason, entries
must be sequenced correctly, from most to least explicit.
IPv4 filter entries can specify one or more matching criteria, with one caveat. In order to support the
maximum 256 entries for IPv4 filters, any entry that uses source port (src-port) and/or destination
port (dst-port) ranges (lt, gt, or range keywords) as match criteria must be within the first 64
entries. See the dst-port and src-port commands for more information.
An entry might not have any match criteria defined (in which case, everything matches) but must have
at least the keyword action for it to be considered complete. Entries without the action keyword are
considered incomplete and are rendered inactive.
The no form of the command removes the specified entry from the filter. Entries removed from the
filter are immediately removed from all entities to which that filter is applied.
Default n/a
Parameters entry-id — an entry-id uniquely identifies a match criteria and the corresponding action. It is
recommended that multiple entries be given entry-ids in staggered increments. This allows
users to insert a new entry in an existing policy without requiring renumbering of all the
existing entries.
Values 1 to 256 (maximum applies to IPv4 filters and MAC filters only)
create — keyword required when first creating the configuration context. When the context is
created, you can navigate into the context without the create keyword.
To Next Page
Loading...
