Configuring Filter Policies
280 7705 SAR OS Router Configuration Guide
VLAN-based Filtering
VLAN filter policies specify either a forward or a drop action for packets, based on VLAN ID
information specified in the policy match criteria.
Only one VLAN filter is allowed per ring port on the 2-port 10GigE (Ethernet) Adapter card
or 2-port 10GigE (Ethernet) module. The same VLAN filter can be applied to both ring ports.
Each VLAN filter supports up to 64 matching criteria entries. The filter acts on ingress traffic
and the forwarding action sends packets to the other ring port or to the v-port, depending on
the packet’s destination.
The number of VLAN filters that can be created depends on the memory available on the
2-port 10GigE (Ethernet) Adapter card or 2-port 10GigE (Ethernet) module.
The 7705 SAR does not support filter logging or statistics collection for VLAN filters.
Filter Policy Entries
Topics in this section include:
• Applying Filter Policies
• Packet Matching Criteria
• Ordering Filter Entries
A filter policy compares the match criteria specified within a filter entry to packets coming
into the system, in the order the entries are numbered in the policy. When a packet matches
all the parameters specified in the entry, the system takes the specified action to either drop
or forward the packet. If a packet does not match the entry parameters, the packet continues
through the filter process and is compared to the next filter entry, and so on.
If the packet does not match any of the entries, the system executes the default action
specified in the filter policy, which is to either drop or forward the packet. Each filter policy
is assigned a unique filter ID. Each filter policy is defined with:
• scope (exclusive or template) (except VLAN filter policies, which always have a
template scope)
• default action (drop or forward)
• description
• at least one filter entry
To Next Page
Loading...
