config
- system
- security
- [no] management-access-filter
- [no] ip-filter
- default-action {permit | deny | deny-host-unreachable}
- [no] entry entry-id
- action {permit | deny | deny-host-unreachable}
- no action
- description description-string
- no description
- dst-port port [mask]
- no dst-port
- fragment {true | false}
- no fragment
- l4-src-port port [mask]
- no l4-src-port
- [no] log
- protocol protocol-id
- no protocol
- router router-instance
- no router
- src-ip {ip-prefix/mask | ip-prefix netmask}
- no src-ip
- src-port {port-id | lag lag-id}
- no src-port
- [no]ipv6-filter
- default-action {permit | deny | deny-host-unreachable}
- [no] entry entry-id
- action {permit | deny | deny-host-unreachable}
- no action
- description description-string
- no description
- dst-port port [mask]
- no dst-port
- flow-label value
- no flow-label
- l4-src-port port [mask]
- no l4-src-port
- [no] log
- next-header next-header
- no next-header
- router router-instance
- no router
- src-ip {ip-prefix/prefix-length | ip-prefix netmask}
- no src-ip
- src-port {port-id | lag lag-id}
- no src-port
- renum old-entry-number new-entry-number
- [no] shutdown