action (IPS signature filter view)

Function

The action command configures the action for an IPS signature filter.

The undo action command restores the default configuration.

Format

action { alert | block | default }

undo action

Parameters

Parameter	Description	Value
alert	Sets the action to alert. The device permits packets and generates a log when the packets match a signature in the signature filter.	-
block	Sets the action to block. The device discards packets and generates a log when the packets match a signature in the signature filter.	-
default	Uses the default action.	-

Views

IPS signature filter view

Default Level

2: Configuration level

Usage Guidelines

The default action for the signature filter is default. That is, when a packet matches a signature in the signature filter, the device performs the action for the signature.

After you set the action for the signature filter to alert or block, the actions for the signatures in the signature filter no longer take effect. When packets match a signature in the signature filter, the device performs the action for the signature filter.

Example

# Set the action for IPS signature filter hello to alert.

<sysname> system-view
[sysname] profile type ips name profile1
[sysname-profile-ips-profile1] signature-set name hello
[sysname-profile-ips-profile1-sigset-hello] action alert