Filter and Firewall
Left running head:
Chapter name (automatic)
740
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Configuration Guide
Alcatel-Lucent
T
O CHANGE THE ORDER OF A RULE
Use the keyword “change” to change the order of a rule to the new number
position.
E
XAMPLE
Consider the following configuration:
ip filter f1
10 match m1 permit
20 match m2 deny log
30 match m3 permit
40 match m4 deny reset
In the above sequence, if m4 has a priority 40. Use the “change “ keyword to
change the priority of m4.
ALU(config)# ip filter f1
ALU(config-filter-f1)# change 40 15
To view the filter configuration after changing the priority, use the show command.
The output appears as shown:
show ip filter f1
ip filter f1
10 match m1 permit
15 match m4 deny reset
20 match m2 deny log
30 match m3 permit
Now, to generate a numbering scheme with a proper order, use the keyword
“renumber”, as explained in the previous section.
T
O UPDATE AN EXISTING RULE
Consider a filter with the following configuration:
ip filter f1
10 match m1 permit
Now, to change this to deny, then you need to enter “deny" in the filter
configuration mode.
ip filter f1
10 match m1 deny