Avaya ERS 45 Series - Table 1: Filter Set Element Evaluation Order and Action Selection; Table 2: Filter Content and Block Compatibility Examples

Avaya Inc. – External Distribution
13
avaya.com
September 2015
Reason: conflicting actions – resolve conflict using evaluation order
1
Update DSCP: 46
Update DSCP: 46
2
Update DSCP: 0
Reason: conflicting actions – resolve conflict using evaluation order
Table 1: Filter Set Element Evaluation Order and Action Selection
Filter Set Element Block Definition: filter set classifier elements can be combined into a block to make
better use of scarce resources. When installed, a single filter set classifier element consumes one
precedence level (i.e., resource usage equivalent to a policy referencing a single filter). A block containing
any number of filter set classifier elements still only consumes one precedence level (i.e., resource usage
equivalent to a policy referencing a filter block) when installed. Combining compatible filter set classifier
elements into blocks can substantially impact resource usage.
Which filter set elements can be combined into a block? As a general rule, classifiers matching the exact
same protocol fields or the exact same portions thereof (e.g., same IP address bits) are compatible. On
the ERS stackable platforms (i.e., 4XXX/56XX/59XX) and VSP7000 these restrictions have been eased
quite a bit. Classifiers matching the same protocol fields, regardless of the whether full or partial field
matches are specified, are compatible. Furthermore, filters matching different but compatible fields (i.e.,
fields from a hardware-defined set of compatible fields) can be combined into a block. Table 2 contains a
few examples of classifier content that is compatible and non-compatible for blocking purposes.
Filter Content
Blocking Compatible
Filter A
Filter B
ERS55XX
ERS56XX/ERS4XXX/ERS59XX
VSP7000
Source IP 1.2.3.4/32
Source IP 5.6.7.8/32
Yes
Yes
DSCP 23, Protocol TCP
DSCP 38, Protocol UDP
Yes
Yes
Src MAC
11:22:33/FF:FF:FF
Src MAC
44:55:66/FF:FF:FF
Yes
Yes
Dst L4 Port Min/Max 0/31
Dst L4 Port Min/Max 0/31
Yes
Yes
Destination IP 1.2.3.4/32
Destination IP 5.6.0.0/16
No
Yes
DSCP
TCP_Ctrl
No
Yes
Src L4 Port Min/Max
123/161
Src L4 Port Min/Max
20/30
No
Yes
Dst MAC 08:81/FF:FF
Src MAC
01:00:81/FF:FF:FF
No
Yes
Destination MAC
Source IP
No
No
Table 2: Filter Content and Block Compatibility Examples