action (user-defined IPS signature view)

Function

The action command configures the action for a user-defined signature.

The undo action command restores the default configuration.

action { alert | block | allow }

undo action

Parameter	Description	Value
alert	Sets the action to alert. The device permits packets and generates a log when the packets match the signature.	-
block	Sets the action to block. The device discards packets and generates a log when the packets match the signature.	-
allow	Sets the action to allow. The device permits packets when the packets match the signature.	-

User-defined IPS signature view

2: Configuration level

If a signature is referenced in a signature filter, the action for the signature filter applies if packets match the signature.

The default action for the signature is alert.

# Configure a user-defined signature. Set the ID to 1, name to mysignature, and action to block.

<sysname> system-view
[sysname] ips signature-id 1
[sysname-ips-signature-1] name mysignature
[sysname-ips-signature-1] action block