[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring the IDS Rule Set

The rule-set statement defines a collection of IDS rules that determine what actions the router software performs on packets in the data stream. You define each rule by specifying a rule name and configuring terms. Then, you specify the order of the rules by including the rule-set statement at the [edit services ids] hierarchy level:




rule-set rule-set-name {

rule rule-name1;

rule rule-name2;

rule rule-name3;
...
}

The router software processes the rules in the order in which you specify them in the configuration. If a term in a rule matches the packet, the router performs the corresponding action and the rule processing stops. If no term in a rule matches the packet, processing continues to the next rule in the rule set. If none of the rules matches the packet, the packet is dropped by default.

[Contents] [Prev] [Next] [Index] [Report an Error]