Alcatel-Lucent 7705 - Ordering Filter Entries; Table 43 VLAN Filter Policy Criteria

Filter Policies
7705 SAR OS Router Configuration Guide 285
Ordering Filter Entries
When entries are created, they should be arranged sequentially from the most explicit entry
to the least explicit. Filter matching ceases when a packet matches an entry. The entry action
is performed on the packet, either drop or forward. To be considered a match, the packet must
meet all the conditions defined in the entry.
Packets are compared to entries in a filter policy in ascending entry ID order. To reorder
entries in a filter policy, for example, to reposition entry ID 6 as entry ID 2, use the renum
command (renum 6 2).
When a filter policy consists of a single entry, the filter executes actions as follows.
• If a packet matches all the entry criteria, the entry’s specified action is performed
(drop or forward).
• If a packet does not match all of the entry criteria, the policy’s default action is
performed (drop or forward).
If a filter policy contains two or more entries, packets are compared in ascending entry ID
order (for example, 1, 2, 3 or 10, 20, 30).
• Packets are compared with the criteria in the first entry ID.
• If a packet matches all the properties defined in the entry, the entry’s specified action
is executed.
• If a packet does not completely match, the packet continues to the next entry, and
then subsequent entries.
• If a packet does not completely match any subsequent entries, the default action is
performed (drop or forward).
Table 43: VLAN Filter Policy Criteria
Criteria Description
VLAN ID or VLAN range Entering a VLAN identifier or range allows the filter to match VLAN ID values
Untagged Selecting untagged allows the filter to match on Ethernet frames with no tag or
dot1q header. Having no tag or dot1q header is also referred to as null
encapsulation.
Note: By default, all created filters have a default action of drop (implicit drop). That is, if
none of the entries in the filter match the packet, and a default action is not explicitly
configured by the user, the packet is dropped.