Draft # Go back one pageGo to the next page#Go to this book's Index

Setting filters

Packets matching a filter match criteria follow the filter action specified in the filter. Use the Filters tab to view and edit filter information.

To configure IP filters:

  1. From the Device Manager menu bar, choose IP Routing > Filter.
  2. The Filter dialog box opens, with the Filters tab displayed.
  3. Click Insert.
  4. The Insert Filters dialog box opens.

The table below describes the Filters tab and Insert Filters dialog box items.


Items Description
Type
Indicates a particular type of filter: global, destination, or source.
DstAddr
Destination IP address to filter on.
DstMask
Destination IP subnet mask to filter on.
SrcAddr
Source IP address to filter on.
SrcMask
Source IP subnet mask to filter on.
Id
A unique identifier (ID) is automatically generated by the system when a filter is created.
Name
The name given to the filter.
ProtocolType
Type of protocol to filter on.
SrcPort
TCP/UDP source port to filter on.
SrcOption
Type of matching to perform on the field rclpFilterSrcPort. For source and destination filters, this value can only be set to equal (1).
DstPort
TCP/UDP destination port to filter on.
DstOption
Type of matching to perform on the field rclpFilterDstPort. For source and destination filters, this value can only be set to equal (1).
CopyToCpu
Specifies whether a packet matching this filter is copied to the CPU.
Mirror
Specifies whether a packet matching this filter is mirrored to the port specified by the field rcMirrorByPortMirrorPort.
HighPriority
Specifies whether a packet matching this filter is forwarded with high priority.
TcpConnect
Specifies whether a TCP packet matching this filter is accepted. This protocol applies only if the IP protocol is set to TCP.
IeeeVlanPriority
Specifies the priority bits for an explicit IEEE VLAN tag for a packet matching this filter. If this priority bit field is greater than the priority filed currently in the IEEE tag in the packet header, this priority field is loaded into the packet header.
DiffServRule
Specifies whether DiffServ bits matching this filter is accepted.
UsePktLimit
Specifies whether the rcIpFilterPktLimit field in this entry should be used when applying this filter.
PktLimit
The maximum packet size limit to filter against.
Mode
Specifies the operation mode for this entry.
useDefaultAction: use the setting specified in rcIpFilterPortDefaultAction.
forward: forward the packet if the packet satisfies this policy.
drop: drop the packet if the packet satisfies this policy.
This variable setting has a higher precedence than the setting in rcIpFilterPortDefaultAction.

To insert a filter:

  1. Select the type of filter (global, destination, or source).
  2. Enter the Destination IP address and subnet mask (optional).
  3. Enter the Source IP address and subnet mask (optional).
  4. Enter the name of the filter (optional).
  5. Enter the protocol: ignore (none), ICMP, TCP, or UDP (optional).
  6. Enter the source port and select the source option (equal, not equal, greater, less, or ignore).
  7. This step is applicable only if a TCP or UDP protocol was selected. The choice is equal or ignore for source or destination filters, and equal, ignore, not equal, greater, and less for global filters.
  8. Enter the destination port and select the destination option (equal, not equal, greater, less, or ignore).
  9. This step is applicable only if a TCP or UDP protocol was selected.
  10. Set the following parameters to true or false (optional):
  11. ­ Mirror
    ­ HighPriority
    ­ TcpConnect
  12. Set the IEEE VLAN priority (1 to 7) (optional).
  13. Select a Differentiated Service (DiffServ) or rule to apply (optional).
  14. For explanation of DiffServ and how to set the rule values, refer to Reference for the Passport 1000 Series Management Software Routing Operations, Release 2.1.

  15. Set the Use Packet Limit to true or false (optional).
  16. Enter the optional packet limit (0 to 65535).
  17. Select the mode (default action, forward, or drop).
  18. Click Insert to enter.

Go back one pageGo to the next page##Go to this book's Index