Filter Policies
7705 SAR OS Router Configuration Guide 293
Common Configuration Tasks
This section provides a brief overview of the tasks that must be performed for IP filter
configuration and provides the CLI commands.
• Creating an IPv4 or IPv6 Filter Policy
• Creating a MAC Filter Policy
• Creating a VLAN Filter Policy
• Configuring Filter Log Policies
• Configuring a NAT Security Profile
• Configuring a NAT Security Policy
• Applying IP and MAC Filter Policies to a Service
• Applying IP Filter Policies to Network Interfaces
• Applying VLAN Filter Policies to a Ring Port
Creating an IPv4 or IPv6 Filter Policy
Configuring and applying filter policies is optional. Each filter policy must have the
following:
• the filter type specified (IP)
• a filter policy ID
• a default action (drop or forward)
• scope specified, either exclusive or template
• at least one filter entry with matching criteria specified
IP Filter Policy
Use the following CLI syntax to create a template IPv4 or IPv6 filter policy:
CLI Syntax: config>filter# ip-filter filter-id [create]
description description-string
scope {exclusive | template}
default-action {drop | forward}