Nokia 7705 - Page 100

Security
100
System Management Guide
3HE 11018 AAAC TQZZA Edition: 01
3.10.2.1.4 CPM Filter Commands
cpm-filter
Syntax [no] cpm-filter
Context config>system>security
Description This command enables the context to configure a CPM (referred to as CSM on the
7705 SAR) filter. A CPM filter is a hardware filter (that is, implemented on the network
processor) for the CSM-destined traffic that applies to all the traffic destined for the CSM
CPU. It can be used to drop or accept packets, as well as allocate dedicated hardware
queues for the traffic. The hardware queues are not user-configurable.
The no form of the command disables the CPM filter.
default-action
Syntax default-action {accept | drop}
Context config>system>security>cpm-filter
Description This command specifies the action to be applied to packets when the packets do not match
the specified criteria in all of the IP filter entries of the filter. If there are no filter entries defined,
the packets received will either be accepted or dropped based on that default action.
Default accept
Parameters accept — packets are accepted unless there is a specific filter entry that causes the
packet to be dropped
drop — packets are dropped unless there is a specific filter entry that causes the packet
to be accepted
ip-filter
Syntax ip-filter
Context config>system>security>cpm-filter
Description This command enables the context to configure IPv4 CPM filter parameters.