Chapter 17: IP Packet Filters, Subscriber Management
STANDARD Revision 1.0 C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved. 563
Filter Group Rules
Every rule in a filter group is identified by a number from 1- 63. This number is called its index in the CLI and is necessary to
add, delete, or modify an individual filter of a filter group. The index numbers also specify the order in which the filters of a
filter group are applied, starting with index number one and ending with number 63.
Calculating Filter Groups
The CLI allows for the creation of up to 1,023 groups and also allows up to 63 rules (indexes) in any filter group. However,
the C4/c CMTS supports a maximum of 16,384 rules. So if all 1,023 groups are configured, they could average only 15 rules.
For example, 260 filter groups could be created, each containing the maximum 63 rules and be within the 16,384 C4/c
CMTS rule limit (16384/63 = 260 filter groups)
Note that protocol types 256 and 257 use more resources than others. Each rule with a match action for type 256 counts
as three rules toward the total of 16,384. Each rule with a match action for type 257 counts as two towards the total.
For this example, if each filter group contained 63 rules, including one type 256 and one type 257, then the maximum
number of filter groups that could be created would be 248 groups. This is derived by adding one extra rule for type 257
and two extra rules for type 256 which equals 66 rules that are divided into the 16,384 maximum. (16384/66 = 248 filter
groups)
Note: A value of 0 indicates that no filter group applies.
Drop Packets Log Data
The following command examples drop packets for filter group 4, indices 1 through 5:
configure cable filter group 4 index 1 ip-version ipv4
configure cable filter group 4 index 1 src-ip 0.0.0.0
configure cable filter group 4 index 1 src-mask 0.0.0.0
configure cable filter group 4 index 1 src-port 65536
configure cable filter group 4 index 1 dest-ip 0.0.0.0
configure cable filter group 4 index 1 dest-mask 0.0.0.0
configure cable filter group 4 index 1 dest-port 135
configure cable filter group 4 index 1 ip-proto 257
configure cable filter group 4 index 1 match-action drop
configure cable filter group 4 index 1 ip-tos 0x0 0x0
configure cable filter group 4 index 2 ip-version ipv4
configure cable filter group 4 index 2 src-ip 0.0.0.0
To Next Page
Loading...