Filter Policies
7705 SAR OS Router Configuration Guide 379
Table 49: Show Filter Associations Output Fields
Label Description
Filter Id The IP filter policy ID
Scope Template — the filter policy is of type Template
Exclusive — the filter policy is of type Exclusive
Entries The number of entries configured in this filter ID
Applied No — the filter policy ID has not been applied
Yes — the filter policy ID is applied
Def. Action Drop — the default action for the filter ID for packets that do not match
the filter entries is to drop
Filter Association IP or IPv6
Entry The filter entry ID. If the filter entry ID indicates that the entry is
Inactive, the filter entry is incomplete as no action was specified.
Src. IP The source IP address and mask match criterion. 0.0.0.0/0 indicates no
criterion specified for the filter entry.
Dest. IP The destination IP address and mask match criterion. 0.0.0.0/0 indicates
no criterion specified for the filter entry.
Protocol The protocol ID for the match criteria. Undefined indicates no protocol
specified. (IPv4 filters only)
Next Header The next header ID for the match criteria. Undefined indicates no next
header is specified. (IPv6 filters only)
ICMP Type The ICMP type match criterion. Undefined indicates no ICMP type
specified.
Fragment: (IPv4 filters
only)
Off — configures a match on all unfragmented packets
On — configures a match on all fragmented packets
TCP-syn Off — the SYN bit is disabled
On — the SYN bit is set
Match action Default — the filter does not have an explicit forward or drop match
action specified. If the filter entry ID indicates the entry is inactive, the
filter entry is incomplete (no action was specified).
Drop — drop packets matching the filter entry
Forward — forward packets matching the filter entry
Ing. Matches The number of ingress filter matches/hits for the filter entry
To Next Page
Loading...
