Alcatel-Lucent 7450 - VID MAC Filters

Filter Policies
Router Configuration Guide 491
The MMRP usage of the mrp-policy ensures automatically that traffic using Group BMAC is
not flooded between domains. However; there could be a small transitory periods when traffic
originated from PBB BEB with unicast BMAC destination may be flooded in the BVPLS
context as unknown unicast in the BVPLS context for both IVPLS and PBB Epipe. To restrict
distribution of this traffic for local PBB services ISID filters can be deployed. The mac-filter
configured with ISID match criterion can be applied to the same interconnect endpoint(s),
BVPLS SAP or PW, as the mrp-policy to restrict the egress transmission any type of frames
that contain a local ISID. The ISID filters will be applied as required on a per B-SAP or B-
PW basis just in the egress direction.
The ISID match criteria are exclusive with any other criteria under mac-filter. A new mac-
filter type attribute is defined to control the use of ISID match criteria and must be set to ISID
to allow the use of ISID match criteria.
VID MAC filters
VID Filters are a type of MAC filters that extend the capability of current Ethernet Ports with
null or default SAP tag configuration to match and take action on VID tags. Service
delimiting tags (for example QinQ 1/1/1:10.20 or dot1q 1/1/1:10, where outer tag 10 and
inner tags 20 are service delimiting) allow fine grain control of frame operations based on the
VID tag. Service delimiting tags are exact match and are stripped from the frame as illustrated
in Figure 20. Exact match or service delimiting Tags do not require VID filters. VID filters
can only be used to match on frame tags that are after the service delimiting tags.
With VID Filters operators can choose to match VID tags for up to two tags on ingress or
egress or both.
• The outer-tag is the first tag in the packet that is carried transparently through the
service.
• The inner-tag is the second tag in the packet that is carried transparently through the
service.
VID Filters add the capability to perform VID value filter policies on default tags (1/1/1:* or
1/1/1:x.*, or 1/1/1/:*.0), or null tags (1/1/1, 1/1/1:0 or 1/1/1:x.0). The matching is based on
the port configuration and the SAP configuration.
At ingress, the system looks for the two outer-most tags in the frame. If present, any service
delimiting tags are removed and not visible to VID MAC filtering. For example:
• 1/1/1:x.y SAP has no tag left for VID MAC filter to match on (outer-tag and inner-
tag = 0)
• 1/1/1:x.* SAP has potentially one tag in the * position for VID MAC filter to match
on