Filter Command Reference
396 7705 SAR OS Router Configuration Guide
Scope Template — the policy is of type template
Exclusive — the policy is of type exclusive
Entries The number of entries configured in this policy ID
Description The security policy description
Applied No — the security policy ID has not been applied
Yes — the security policy ID is applied
Def. Action Reject — the default action for packets that do not match the policy
entries is to reject
Policy Match Criteria
Entry The policy entry ID
Description The policy entry description
Match Direction Zone inbound — the match criteria is applied to packets inbound to the
zone
Zone outbound — the match criteria is applied to packets outbound
from the zone
Both — the match criteria is applied to packets both inbound to and
outbound from the zone
Src. IP The source IP address and prefix length match criterion
Dest. IP The destination IP address and prefix length match criterion
Protocol The protocol for the match criteria. Undefined indicates no protocol
specified.
ICMP Type The ICMP type match criterion. Undefined indicates no ICMP type is
specified.
Profile ID The NAT profile ID
Active No — the policy match criteria entry is not active
Yes — the policy match criteria entry is active
Action Nat — applies NAT to the packets matching the profile entry
Reject — rejects packets matching the profile entry
Forward — forward packets matching the profile entry
Src. Port The source TCP or UDP port number or port range
Table 59: Show Security Policy Output Fields (Detail) (Continued)
Label Description
To Next Page
Loading...
