Global Filter Commands - Alcatel-Lucent 7210 SAS Configuration Manual

Configuration Commands

Global Filter Commands

ip-filter
Syntax [no] ip-filter filter-id [create]
Context config>filter
Description
This command creates a configuration context for an IP filter policy.
IP-filter policies specify either a forward or a drop action for packets based on the specified match
criteria.
The IP filter policy, sometimes referred to as an access control list (ACL), is a template that can be
applied to multiple services as long as the scope of the policy is template.
Any changes made to the existing policy, using any of the sub-commands, will be applied
immediately to all services where this policy is applied. For this reason, when many changes are
required on an ip-filter policy, it is recommended that the policy be copied to a work area. That work-
in-progress policy can be modified until complete and then written over the original filter policy. Use
the config filter copy command to maintain policies in this manner.
The no form of the command deletes the IP filter policy. A filter policy cannot be deleted until it is
removed from all SAPs where it is applied.
Parameters filter-id — Specifies the IP filter policy ID number.
create — Keyword required when first creating the configuration context. Once the context is
mac-filter
Syntax [no] mac-filter filter-id [create]
Context config>filter
Description
This command enables the context for a MAC filter policy.
The mac-filter policy specifies either a forward or a drop action for packets based on the specified
match criteria.
The mac-filter policy, sometimes referred to as an access control list, is a template that can be applied
to multiple services as long as the scope of the policy is template.
Note it is not possible to apply a MAC filter policy to a network port.
Any changes made to the existing policy, using any of the sub-commands, will be applied
immediately to all services where this policy is applied. For this reason, when many changes are
required on a mac-filter policy, it is recommended that the policy be copied to a work area. That
work-in-progress policy can be modified until complete and then written over the original filter
Page 98
Values 1 — 65535
created, one can navigate into the context without the create keyword.
7210 SAS D, E OS Router Configuration Guide