Alcatel-Lucent 7450 - Page 583

Filter Policies
Router Configuration Guide 583
Configuring the HTTP-Redirect Option
If http-redirect is specified as an action, a corresponding forward entry must be specified
before the redirect. Http-redirect is not supported on the 7450 ESS-1 model.
The following displays an http-redirect configuration example:
A:ALA-48>config>filter>ip-filter# info
----------------------------------------------
description "Captive Portal Filter"
scope template
entry 10 create
description "Allow DNS"
match protocol udp
dst-port eq 53
exit
action forward
exit
entry 20 create
description "Allow Captive Portal"
match protocol tcp
dst-ip 100.0.0.2/32
dst-port eq 80
exit
action forward
exit
entry 30 create
description "HTTP Redirect to Captive Portal"
match protocol tcp
dst-port eq 80
exit
action http-redirect "http://100.0.0.2/login.cgi?mac=$MAC$sap=$S
AP&ip=$IP&orig_url=$URL"
exit
----------------------------------------------
A:ALA-48>config>filter>ip-filter#
Cflowd Filter Sampling
Within a filter entry, you can specify that traffic matching the associated IPv4 filter entry is
sampled. if the IPv4 interface is set to cflowd acl mode. Enabling filter-sample enables the
cflowd tool.
The following displays an IPv4 filter entry configuration example.
A:ALA-7>config>filter>ip-filter# info
----------------------------------------------
description "filter-main"
scope exclusive
entry 10 create
description "no-91"
filter-sample
interface-disable-sample