Table of Contents
6 7705 SAR OS Router Configuration Guide
Filter Policies ...................................................................................................................................... 273
In This Chapter .................................................................................................................................................273
Configuring Filter Policies.................................................................................................................................274
Overview of Filter Policies ...........................................................................................................................274
Network and Service (Access) Interface-based Filtering ............................................................................276
Policy-Based Routing ..................................................................................................................................277
Multi-field Classification (MFC)....................................................................................................................279
VLAN-based Filtering ..................................................................................................................................280
Filter Policy Entries......................................................................................................................................280
Applying Filter Policies ...........................................................................................................................281
Packet Matching Criteria ........................................................................................................................282
Ordering Filter Entries ............................................................................................................................285
Filter Log Files.............................................................................................................................................287
Configuration Notes..........................................................................................................................................288
IP Filters ......................................................................................................................................................288
IPv6 Filters ..................................................................................................................................................289
MAC Filters..................................................................................................................................................289
VLAN Filters ................................................................................................................................................290
Filter Logs....................................................................................................................................................290
Reference Sources......................................................................................................................................290
Configuring Filter Policies with CLI ...................................................................................................................291
Basic Configuration ..........................................................................................................................................292
Common Configuration Tasks ..........................................................................................................................293
Creating an IPv4 or IPv6 Filter Policy..........................................................................................................293
IP Filter Policy ........................................................................................................................................293
IP Filter Entry .........................................................................................................................................295
IP Filter Entry Matching Criteria .............................................................................................................296
IP Filter Entry for PBR to a System IP or Loopback Address ................................................................298
Creating a MAC Filter Policy .......................................................................................................................300
MAC Filter Policy....................................................................................................................................300
MAC Filter Entry .....................................................................................................................................301
MAC Entry Matching Criteria..................................................................................................................302
Creating a VLAN Filter Policy......................................................................................................................303
VLAN Filter Policy ..................................................................................................................................303
VLAN Filter Entry ...................................................................................................................................304
VLAN Entry Matching Criteria ................................................................................................................305
Configuring Filter Log Policies.....................................................................................................................306
Configuring a NAT Security Profile..............................................................................................................307
Configuring a NAT Security Policy ..............................................................................................................308
Applying IP and MAC Filter Policies to a Service........................................................................................310
Applying IP Filter Policies to Network Interfaces ........................................................................................312
Applying VLAN Filter Policies to a Ring Port...............................................................................................313
Filter Management Tasks .................................................................................................................................314
Renumbering Filter Policy Entries ...............................................................................................................314
Modifying an IP Filter Policy ........................................................................................................................317
Modifying a MAC Filter Policy .....................................................................................................................318
Modifying a VLAN Filter Policy ....................................................................................................................319
Removing and Deleting a Filter Policy ........................................................................................................320
Removing a Filter from a Service ...........................................................................................................320