Filter Policies
7705 SAR OS Router Configuration Guide 275
IP Filters
IPv4 filters can be applied to the following entities:
• ingress and egress network interfaces, which affect incoming traffic from the
network link and outgoing traffic to the network link
• ingress IES management SAPs, which affects incoming node management traffic
• ingress pseudowire SAPs (Epipes and Ipipes), VPLS SAPs, VPRN SAPs, and IES
SAPs, which affects incoming user traffic
• ingress VPLS SDPs (spoke and mesh), which affects incoming traffic from the
remote end of the service
• ingress IES and VPRN interface spoke SDPs, which affects incoming traffic from the
remote end of the service
• egress VPRN and IES SAPs, and egress VPLS SAPs (Ethernet SAPs only), which
affects outgoing user traffic
Ingress filters affect only incoming packets regardless of whether the packets need to be
forwarded to a downstream router or are destined for the 7705 SAR.
IPv6 filters can be applied to the following entities:
• ingress and egress Ethernet network interfaces (with null or dot1q encapsulation)
• ingress and egress network interfaces on the 4-port OC3/STM1 Clear Channel
Adapter card (with POS encapsulation)
• ingress and egress IES SAPs
MAC Filters
MAC filters can be applied to the following entities:
• ingress VPLS SAPs, which affects incoming user traffic
• ingress VPLS SDPs (spoke and mesh), which affects outgoing user traffic
VLAN Filters
VLAN filters can be applied to ring ports at the ingress point on the 2-port 10GigE (Ethernet)
Adapter card and 2-port 10GigE (Ethernet) module. VLAN filters are blocked on all other
adapter cards and modules.
To Next Page
Loading...
