Filter Policies
7750 SR OS Router Configuration Guide Page 363
Filter Policy Commands
default-action
Syntax default-action {drop | forward}
Context config>filter>ip-filter
config>filter>ipv6-filter
config>filter>mac-filter
Description This command specifies the action to be applied to packets when the packets do not match the
specified criteria in all of the IP filter entries of the filter.
When multiple default-action commands are entered, the last command will overwrite the previous
command.
Default drop
Parameters drop — Specifies all packets will be dropped unless there is a specific filter entry which causes the
packet to be forwarded.
forward — Specifies all packets will be forwarded unless there is a specific filter entry which causes
the packet to be dropped.
scope
Syntax scope {exclusive | template}
no scope
Context config>filter>ip-filter
config>filter>ipv6-filter
config>filter>mac-filter
Description This command configures the filter policy scope as exclusive or template. If the scope of the policy is
template and is applied to one or more services or network interfaces, the scope cannot be changed.
The no form of the command sets the scope of the policy to the default of template.
Default scope template — a filter is created as a filter policy template
Parameters exclusive — When the scope of a policy is defined as exclusive, the policy can only be applied to a
single entity (SAP or network port). Attempting to assign the policy to a second entity will result
in an error message. If the policy is removed from the entity, it will become available for
assignment to another entity.
template — When the scope of a policy is defined as template, the policy can be applied to multiple
SAPs or network ports.