Setting the packet filtering default action

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Set the packet filtering default action to deny.

packet-filter default deny

By default, the packet filter permits packets that do not match any ACL rule to pass.