IP and IPv6 Filters
Page 88 7750 SR RADIUS Attributes Reference Guide
26-6527-134 Alc-Subscriber-
Filter
string Max. 1 VSA. Comma separated list of strings:
Ingr-v4:<number>, Ingr-
v6:<number>,Egr-v4:<number>,Egr-
v6:<number>
where <number> can be one of:
[1..65535] = ignore sla-profile filter;
apply this filter-id
0 = ignore sla-profile filter; do not
assign a new filter (only allowed if no
dynamic subscriber host specific rules
are present)
-1 = No change in filter configuration
-2 = Restore sla-profile filter
For example:Alc-Subscriber-Filter =
Ingr-v4:20,Egr-v4:101
26-6527-158 Alc-Nas-Filter-
Rule-Shared
string Multiple attributes per
RADIUS message allowed.
The format is identical to [92] NAS-
Filter-Rule and is defined in RFC
3588 section-4.3. A single filter rule is
a string of format <action>
<direction> <protocol> from
<source> to <destination> <options>
Multiple rules should be separated by
a NUL (0x00). An Alc-Nas-Filter-
Rule-Shared attribute may contain a
partial rule, one rule, or more than one
rule. Filter rules may be continued
across attribute boundaries.
A RADIUS message with Alc-Nas-
Filter-Rule-Shared attribute value
equal to 0x00 or “ “ (a space) removes
the shared filter entries for that host.
See also IP Filter Attribute Details on
page 90.
For example:Alc-Nas-Filter-Rule-
Shared = permit in ip from any to
10.1.1.1/32
Table 18: IP and IPv6 Filters (limits) (Continued)
Attribute ID Attribute Name Type Limits SR OS Format
To Next Page
Loading...
