Configuration Commands
Page 98 7210 SAS D, E OS Router Configuration Guide
Global Filter Commands
ip-filter
Syntax [no] ip-filter filter-id [create]
Context config>filter
Description This command creates a configuration context for an IP filter policy.
IP-filter policies specify either a forward or a drop action for packets based on the specified match
criteria.
The IP filter policy, sometimes referred to as an access control list (ACL), is a template that can be
applied to multiple services as long as the scope of the policy is template.
Any changes made to the existing policy, using any of the sub-commands, will be applied
immediately to all services where this policy is applied. For this reason, when many changes are
required on an ip-filter policy, it is recommended that the policy be copied to a work area. That work-
in-progress policy can be modified until complete and then written over the original filter policy. Use
the config filter copy command to maintain policies in this manner.
The no form of the command deletes the IP filter policy. A filter policy cannot be deleted until it is
removed from all SAPs where it is applied.
Parameters filter-id — Specifies the IP filter policy ID number.
Values 1 — 65535
create — Keyword required when first creating the configuration context. Once the context is
created, one can navigate into the context without the create keyword.
mac-filter
Syntax [no] mac-filter filter-id [create]
Context config>filter
Description This command enables the context for a MAC filter policy.
The mac-filter policy specifies either a forward or a drop action for packets based on the specified
match criteria.
The mac-filter policy, sometimes referred to as an access control list, is a template that can be applied
to multiple services as long as the scope of the policy is template.
Note it is not possible to apply a MAC filter policy to a network port.
Any changes made to the existing policy, using any of the sub-commands, will be applied
immediately to all services where this policy is applied. For this reason, when many changes are
required on a mac-filter policy, it is recommended that the policy be copied to a work area. That
work-in-progress policy can be modified until complete and then written over the original filter
To Next Page
Loading...
