Nokia 7705 - Page 93

System Management Guide Security
Edition: 01 3HE 11018 AAAC TQZZA 93
default-action
Syntax default-action {permit | deny | deny-host-unreachable}
Context config>system>security>management-access-filter>ip-filter
config>system>security>management-access-filter>ipv6-filter
Description This command creates the default action for management access in the absence of a specific
management access filter match.
The default-action is applied to a packet that does not satisfy any match criteria in any of the
management access filters. Whenever management access filters are configured, the
default-action must be defined.
Default n/a
Parameters permit — specifies that packets not matching the configured selection criteria in any of
the filter entries will be permitted
deny — specifies that packets not matching the selection criteria will be denied
deny-host-unreachable — specifies that packets not matching the selection criteria will
be denied and a host unreachable message will be issued
entry
Syntax [no] entry
Context config>system>security>management-access-filter>ip-filter
config>system>security>management-access-filter>ipv6-filter
Description This command is used to create or edit a management access filter entry. Multiple entries can
be created with unique entry-id numbers. The 7705 SAR exits the filter upon the first match
found and executes the actions according to the respective action command. For this reason,
entries must be sequenced correctly from most to least explicit.
An entry may not have any match criteria defined (in which case, everything matches) but
must have at least the keyword action defined to be considered complete. Entries without the
action keyword are considered incomplete and inactive.
The no form of the command removes the specified entry from the management access filter.
Default n/a
Parameters entry-id — an entry ID uniquely identifies a match criteria and the corresponding action.
It is recommended that entries be numbered in staggered increments. This allows
users to insert a new entry in an existing policy without having to renumber the
existing entries.
Values 1 to 9999