Filter Policies
7705 SAR OS Router Configuration Guide 295
The following example displays an exclusive filter policy configuration.
A:ALU-7>config>filter# info
----------------------------------------------
...
ip-filter 11 create
description "filter-main"
scope exclusive
exit
...
----------------------------------------------
A:ALU-7>config>filter#
IP Filter Entry
Within a filter policy, configure filter entries that contain criteria against which ingress,
egress, and network traffic is matched. The action specified in the entry determines how the
packets are handled, either dropped or forwarded.
• Enter a filter entry ID. The system does not dynamically assign a value.
• Assign an action, either drop or forward.
• Specify matching criteria (see IP Filter Entry Matching Criteria).
The forward next-hop command is used to implement policy-based routing. For details,
see Policy-Based Routing. Use the indirect keyword to identify the indirect next-hop
router to which packets with matching criteria will be forwarded. The forward fc
command is used to implement multi-field classification. For details, see Multi-field
Classification (MFC).
Use the following CLI syntax to create an IP filter entry:
CLI Syntax: config>filter# ip-filter filter-id [create]
entry entry-id
description description-string
action [drop]
action forward [next-hop {ip-address | indirect
ip-address}] [fc fc-name [priority low |
high]]
Example: config>filter# ip-filter 11
config>filter>ip-filter# entry 10 create
config>filter>ip-filter>entry$ description "no-91"
config>filter>ip-filter>entry$ action drop
config>filter>ip-filter>entry# exit
To Next Page
Loading...
