Filters

Id. This filter's unique identifier(id). This id is automatically generated by the system when a filter is created. This id is used in the 'rcIpFilterGlobalListTable' and 'rcIpFilterBaseListTable' when grouping one or more filters into a filter list.

Type. Used to indicate a particular type of filter. All Ip filters are applied at the ingressing port. A 'global' filter is a filter that may be applied to all packets irregardless of the packet's source and destination addressing information. A 'destination' filter is a filter that requires the destination addressing information, and the source address can be wild card. A 'source' filter is a filter that requires source addressing information, and the destination address can be wild card.

DstAddr. Destination IP address to filter on.

DstMask. Destination IP subnet mask.

SrcAddr. Source IP address to filter on.

SrcMask. Source IP subnet mask.

Name. This filter's name

ProtocolType. IP protocal Id to match.

SrcPort. TCP/UDP source port to match.

SrcOption. Type of matching to perform on the field 'rcIpFilterSrcPort'. For 'source' and 'destination' filters, this value can only be 'equal(1)'. Global filter can have options of "<", "=", ">".

DstPort. TCP/UDP destination port to match.

DstOption. Type of matching to perform on the field 'rcIpFilterDstPort'. For 'source' and 'destination' filters, this value can only be 'equal(1)'. Global filter can have options of "<", "=", ">".

Mirror. Used to specify whether a packet matching this filter should be mirrored to the port specified by 'rcMirrorByPortMirrorPort'.

TcpConnect. Used to specify whether a TCP packet matching this filter should be accepted. Pass only those matching TCP packets with either the ACK bit or RST bit set. Apply only if the IP Protocol is set to TCP.

Mode. Used to specify the operation mode for this entry. 'useDefaultAction' means use the setting specified in the 'rcIpFilterPortDefaultAction' variable. 'forward' means forward the packet if the packet satisfies this policy. 'drop' means drop the packet if the packet satisfies this policy. If the port default action is 'drop', a forward mode of matching filter will pass the packet. If the port default action is 'forward', a drop mode of matching filter will pass the packet.

StopOnMatch. Used to stop further filtering if this filter is applied.

MatchIcmpRequest. Used to specify whether matching on ICMP Request packets should be performed.

MatchIpFragment. Used to specify whether matching on fragmented IP packets should be performed.

StatisticEnable. Used to turn on/off counters for this filter.

MatchIeee8021PEnable. Used to specify whether the value stored in the variable 'rcIpFilterDiffServMatchIeee8021P' should be used in this filter.

MatchIeee8021P. Used to specify the match value for the 802.1P field. If the 802.1P field in the incoming packet matches this value, then this filter will be applied to the packet.

MatchDsFieldEnable. Used to specify whether the value stored in the variable 'rcIpFilterDiffServMatchDsField' should be used in this filter.

MatchDsField. Used to specify the match value for the DSCP field. If the DSCP field in the incoming packet matches this value, then this filter will be applied to the packet.

ModifyIeee8021PEnable. Used to specify whether the value stored in the variable 'rcIpFilterDiffServModifyIeee8021P' should be used in this filter.

ModifyIeee8021P. Used to specify the value the 802.1P field should be modified to if this filter is applied. The modification is applied at the egress point.

ModifyDsFieldEnable. Used to specify whether the value stored in the variable 'rcIpFilterDiffServModifyDsField' should be used in this filter.

ModifyDsField. Used to specify the value the DSCP field should be modified to if this filter is applied. The modification is applied at the egress point.

TrafficProfileId. Used to specify which traffic profile should be applied to packets matching this filter. Traffic profiles are specified in the 'rc2kQosTrafficProfileTable' table. A '0' value means do not apply any traffic profile.

[Contents | Edit]

Global Set / Source/Destination Set

Name. Name of this filter list.

FilterIdList. Used to indicate the filter Ids of filters are associated with this filter list.

MemberPorts. Ports filter is used on.

[Contents | Edit]

Filtered Ports

FilterList. Used to indicate zero or more filter lists that are associated with this port. Each filter list identifier is stored as two bytes in this array starting from offset zero. Any unused bytes should be set to zero.

Port. A port where filtering is applied.

Enable. Used to indicate whether filtering is enabled on this port.

DefaultAction. Used to indicate the default action that should be performed when an IP filter applies to a particular port. When filters are not enabled on the port the action is set to 'none' which means the port does not block any packet. 'none' cannot be used when PortEnable is true. On a port configured as 'forward', any packet that does not match a filter is allowed to be forwarded. On a port configured as 'drop', any packet that does not match a filter is dropped.

NumGlobalFilters. Used to indicate the default action that should be performed when an IP filter applies to a particular port.

When filters are not enabled on the port the action is set to 'none' which means the port does not block any packet. 'none' cannot be used when PortEnable is true.

On a port configured as 'forward', any packet that satisfies a filter is allowed to be forwarded.

On a port configured as 'drop', any packet that satisfies a filter is dropped.

NumBaseFilters. Number of base filters

[Contents | Edit]