Filter Policies
Router Configuration Guide 589
Applying (IPv4/v6) Filter Policies to a Network Port
IP filter policies can be applied to network IP (v4/v6) interfaces. MAC filters cannot be
applied to network IP interfaces or to routable IES services. Similarly to applying filter
policies to service, IP (v4/v6) filter policies are applied to network interfaces by associating
a policy with ingress and/or egress direction as desired. Filter ID is used to associate an
existing filter policy, or if defined, a Filter Name for that Filter ID policy can be used in the
CLI.
The following displays an IP filter applied to an interface at ingress.
A:ALA-48>config>router# info
#------------------------------------------
# IP Configuration
#------------------------------------------
...
interface "to-104"
address 10.0.0.103/24
port 1/1/1
ingress
filter ip 10
exit
egress
filter ip “default network egress policy”
exit
exit
...
#------------------------------------------
A:ALA-48>config>router#
The following displays IPv4 and IPv6 filters applied to an interface at ingress and egress.
A:config>router>if# info
----------------------------------------------
port 1/1/1
ipv6
address 3FFE::101:101/120
exit
ingress
filter ip 2
filter ipv6 1
exit
egress
filter ip 2
filter ipv6 1
exit
----------------------------------------------
A:config>router>if#
To Next Page
Loading...
