Activating packet rules
Activating the packet rules that you create is the final step in configuring packet rules.
You must activate or load the rules that you created in order for them to work. However, before you activate your rules, you should verify that they are correct. Always try to resolve any problems before activating your packet rules. If you activate the rules that have errors or that are ordered incorrectly, your system will be at risk. Your system has a verify function that is automatically invoked any time you activate your rules. Because this automatic feature only checks for major syntactical errors, you should not rely solely on it. Make sure to always manually check for the errors in your rules files as well.
When filter rules are not applied to an interface (for example, you are only using NAT rules, not filtering rules), a warning (TCP5AFC) appears. This is not an error. It only verifies whether using one interface is your intention. Always look at the last message. If it says the activation is successful, the messages above it are all warnings.
After your packet rules have been configured and activated, you might need to periodically manage them to ensure the security of your system.
For instructions on how to activate your packet rules, use the Packet Rules Editor online help. Packet rules can also be activated by using the Load/Unload IP Filter (LODIPFTR) CL command. The LODIPFTR command is used to load or unload Internet Protocol (IP) filter rules.