Virtual Private Routed Network Services
7750 SR OS Services Guide Page 1241
filter
Syntax filter ip ip-filter-id
filter ipv6 ipv6-filter-id
no filter
Context config>service>vprn>if>spoke-sdp>egress
config>service>vprn>if>spoke-sdp>ingress
config>service>vprn>red-if>spoke-sdp>ingress
config>service>vprn>red-if>spoke-sdp>egress
Description This command associates an IP filter policy with an ingress or egress Service Access Point (SAP) or
IP interface. An IP filter policy can be associated with spoke SDPs. Filter policies control the
forwarding and dropping of packets based on IP or MAC matching criteria.
The filter command is used to associate a filter policy with a specified ip-filter-id with an ingress or
egress SAP. The ip-filter-id must already be defined before the filter command is executed. If the
filter policy does not exist, the operation will fail and an error message returned.
In general, filters applied to SAPs (ingress or egress) apply to all packets on the SAP. One exception
is non-IP packets are not applied to IP match criteria, so the default action in the filter policy applies
to these packets.
The no form of this command removes any configured filter ID association with the SAP or IP
interface. The filter ID itself is not removed from the system unless the scope of the created filter is
set to local. To avoid deletion of the filter ID and only break the association with the service object,
use scope command within the filter definition to change the scope to local or global. The default
scope of a filter is local.
Parameters ip ip-filter-id — Specifies IP filter policy. The filter ID must already exist within the created IP
filters.
Values 1 — 65535
To Next Page
Loading...
