Filter Management Tasks
Page 338 7750 SR OS Router Configuration Guide
Modifying an IP Filter Policy

To access a specific IP filter, you must specify the filter ID. Use the no form of the command to

remove the command parameters or return the parameter to the default setting.

Example:config>filter>ip-filter# description "New IP filter info"

config>filter>ip-filter# entry 2 create

config>filter>ip-filter>entry$ description "new entry"

config>filter>ip-filter>entry# action drop

config>filter>ip-filter>entry# match dst-ip 10.10.10.104/32

config>filter>ip-filter>entry# exit

config>filter>ip-filter#

The following output displays the modified IP filter output:

A:ALA-7>config>filter# info
----------------------------------------------
..
ip-filter 11 create
description "New IP filter info"
scope exclusive
entry 1 create
match
dst-ip 10.10.10.91/24
src-ip 10.10.10.106/24
exit
action drop
exit
entry 2 create
description "new entry"
match
dst-ip 10.10.10.104/32
exit
action drop
exit
entry 10 create
match
dst-ip 10.10.10.91/24
src-ip 10.10.0.100/24
exit
action drop
exit
entry 15 create
description "no-91"
match
dst-ip 10.10.10.91/24
src-ip 10.10.10.103/24
exit
action forward
exit
entry 30 create
match
dst-ip 10.10.10.91/24
src-ip 10.10.0.200/24
exit
action forward
exit