Filter Policies
7705 SAR OS Router Configuration Guide 365
policy
Syntax policy policy-id [create]
no policy policy-id
Context config>security
Description This command configures a policy group that provides a context within which you can configure a
security policy.
The no form of the command removes the configured policy group.
Default n/a
Parameters policy-id — specifies the ID of the policy group
Values 1 to 65535
entry
Syntax entry entry-id [create]
no entry entry-id
Context config>security>policy
Description This command configures a NAT policy entry.
The no form of this command deletes the entry with the specified ID. When an entry is deleted, all
configuration parameters for the entry are also deleted.
Parameters id — the entry ID number
action
Syntax action {forward | reject | nat}
no action
Context config>security>policy>entry
Description This command specifies what action to take (forward, reject, or nat) when packets match the entry
criteria. The action keyword must be entered and a keyword must be specified for the entry to be
active. If reject, forward, or nat is not specified, the action is rejected.
The nat and forward actions cause a 6-tuple lookup (src/dst IP, src/dst port, protocol, src zone). If
there is a match, NAT is applied and the packet is routed based on the datapath session table.
Multiple action statements entered will overwrite previous action statements when defined.
To Next Page
Loading...
