Alcatel-Lucent 7705 - Applying IP and MAC Filter Policies to a Service

Common Configuration Tasks
310 7705 SAR OS Router Configuration Guide
The following output displays a modified NAT policy output.
A:ALU-7>config>security# info
----------------------------------------------
..
policy 1 create
name "inbound policy"
description "common egress policy"
entry 1 create
description "Source NAT"
match
direction zone-inbound
exit
limit
action nat
profile 2
exit
entry 2 create
description "Dest NAT"
match local protocol udp
dst-port eq 4000
exit
limit
action nat destination 10.10.10.1 port 4000
profile 2
exit
commit
..
----------------------------------------------
A:ALU-7>config>security#
Applying IP and MAC Filter Policies to a Service
Filter policies must be created before they can be applied to a service. Create filter policies in
the config>filter context.
The following CLI syntaxes show how to apply filter policies to services. Use the first CLI
syntax to apply an IP or MAC filter policy to a VPLS SAP, mesh SDP, or spoke SDP. Use
the second CLI syntax for Epipe or Ipipe services. Use the third CLI syntax for VPRN or IES
interface SAPs and spoke SDPs. (For IES SAPs, IPv6 ingress and egress filters can also be
applied.)
CLI Syntax: config>service# vpls service-id
sap sap-id
egress
filter ip ip-filter-id
ingress
filter ip ip-filter-id
filter mac mac-filter-id