Classifier Management Introduction
6-13
Software Reference for SwitchBlade x3100 Series Switches (Access and Security)
52 ip2 IPSOURCE=1.1.1.2/32
53 ip3 IPSOURCE=1.1.1.3/32
54 ip4 IPSOURCE=1.1.1.4/32
55 ip5 IPSOURCE=1.1.1.5/32
56 ip6 IPSOURCE=1.1.1.6/32
57 ip7 IPSOURCE=1.1.1.7/32
69 ipde IPSOURCE=ANY DROP
The following shows that classifiers are added by the system when they can be derived. For the IPSOURCE clas-
sifiers, the PROTOCOL (IPV4) and IPVERSION (4) are derived from the IPSOURCE and are added with the (D)
added, telling the user these were added by the system.
officer SEC>> show class all interface=2.0 full
--- Classifier Configuration Data ---------------------------------------------
Interface Rank Name Field Match(es) Action(s)
--------- ---- ------------ ---------------------------------------- ---------
ETH:2.0 51 ip1 PROTOCOL=IPV4 (D)
IPVERSION=4 (D)
IPSOURCE=1.1.1.1/32
52 ip2 PROTOCOL=IPV4 (D)
IPVERSION=4 (D)
IPSOURCE=1.1.1.2/32
53 ip3 PROTOCOL=IPV4 (D)
IPVERSION=4 (D)
IPSOURCE=1.1.1.3/32
54 ip4 PROTOCOL=IPV4 (D)
IPVERSION=4 (D)
IPSOURCE=1.1.1.4/32
55 ip5 PROTOCOL=IPV4 (D)
IPVERSION=4 (D)
IPSOURCE=1.1.1.5/32
56 ip6 PROTOCOL=IPV4 (D)
IPVERSION=4 (D)
IPSOURCE=1.1.1.6/32
57 ip7 PROTOCOL=IPV4 (D)
IPVERSION=4 (D)
IPSOURCE=1.1.1.7/32
69 ipde PROTOCOL=IPV4 (D) DROP
IPVERSION=4 (D)
IPSOURCE=ANY
-------------------------------------------------------------------------------
6.3.2.6 Set Match Rule Defaults (SETDEFAULTS)
Classifier match rule defaults can be reset using the SETDEFAULTS command. This command is useful if the
user wishes to change a match rule setting without having to delete the classifier. An example follows.
Here a classifier, ipfilt1, is created with IPSOURCE set.
officer SEC>> CREATE CLASSIFIER=ipfilt1 IPSOURCE=172.16.5.0/28
Info (010017): Operation Successful
officer SEC>> SHOW CLASSIFIER=IPFILT1
--- Classifier Configuration Data ---------------------------------------------
Name Field Match(es) Action(s)
------------------- -------------------------------------- -------------------
ipfilt1 IPSOURCE= 172.16.5.0/
28
-------------------------------------------------------------------------------
An action is added to the classifier to drop the IPSOURCE ipaddress.
officer SEC>> ADD ACTION CLASSIFIER=ipfilt1 DROP