Command Reference Guide

SROS Command Line Interface Reference Guide Global Configuration Mode Command Set

ip policy-class <policyname> max-sessions <number>

Use the ip policy-class command to create an access control policy and enter the access control policy.

Use the no form of this command to delete an access policy and all the entries contained in it.

Syntax Description

<policyname> Alphanumeric descriptor (maximum of 255 characters) for identifying the

configured access policy. All access policy descriptors are case-sensitive.

max-sessions Optional.

Configure a maximum number of allowed policy sessions. This number

must be within the appropriate range limits. The limits are either 1-4000 or 1-30000

(depending on the type of Secure Router OS device you are using).

Default Values

By default, all

Secure Router OS

security features are disabled and there are no configured access lists.

Command Modes

(config)# Global Configuration Mode

Note

Configured access policies will only be active if the ip firewall command has been entered

at the Global Configuration Mode prompt to enable the Secure Router OS security features.

All configuration parameters are valid, but no security data processing will be attempted

unless the security features are enabled.

Caution

Before applying an access control policy to an interface, verify your Telnet

connection will not be affected by the policy. If a policy is applied to the interface you

are connecting through and it does not allow Telnet traffic, your connection will be

lost.