Managing Security Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
739
Alcatel-Lucent
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Configuration Guide
UPDATIONS
The numbering pattern employed by default in the OmniAccess 5740 USG is
multiples of ten. If a new rule has to be included in between two existing rules,
without actually changing the sequence of numbering, use the “renumber”
keyword.
To change the line number of a pre-defined rule, use the “change” keyword. This
allows you to just change the line number and not to swap between two numbers.
Note: Line numbers will not be shown unless you specifically type them in. You can view the
line numbers only in “show” commands.
T
O RENUMBER LINE NUMBERS
Use the keyword “renumber” to normalize the line numbers of each rule and set
them to the consecutive multiples of 10.
E
XAMPLE
Consider the following configuration:
ip filter f1
10 match m1 permit
15 match m4 deny reset
20 match m2 deny log
30 match m3 permit
stateless
Here the numbers does not follow the specified order. This becomes more
complex when you try to enter another match in between 10 and 15. This creates
ambiguity in the flow and in prioritizing the rules. Hence after the insertion of any
specific rule, the ordering can be set back to its original manner with the help of
the keyword “renumber”.
ip filter f1
renumber
To view the filter configuration after renumbering, give the show command.
show ip filter f1
ip filter f1
10 match m1 permit
20 match m4 deny reset
30 match m2 deny log
40 match m3 permit
stateless
To Next Page
Loading...
Need help?
General
