Table 20: [92] Nas-Filter-Rule Attribute Format - Alcatel-Lucent 7750 Reference Manual

IP and IPv6 Filters
IP Filter Attribute Details
[92] Nas-Filter-Rule and [26-6527-158] Alc-Nas-Filter-Rule-Shared
The format for [92] Nas-Filter-Rule and [26-6527-158] Alc-Nas-Filter-Rule-Shared is a string
formatted as: <action> <direction> <protocol> from <source> to <destination> <options>.
Table 20

Table 20: [92] Nas-Filter-Rule Attribute Format

Action or Classifier
<action>
<direction>
<protocol>
from <source>
Page 90
displays details on the respective fields.
Value
deny
permit
in
out
ip
any number [0..255]
ip
any number [1..42]
any number [45..49]
any number [52..59]
any number [61..255]
any number 43|44|50|51|60
any 100
200-65535
ip-prefix/length 100
200-65535
Corresponding SR OS Filter Function
action drop
action forward
ingress
egress
protocol none
protocol [0..255]
next-header none
next-header [1..42]
next-header [45..49]
next-header [52..59]
next-header [61..255]
not supported
ingress: src-ip = host-ip-address; src-port eq 100
egress: src-ip = 0.0.0.0/0 | ::/0; src-port eq 100
ingress: src-ip = host-ip-address; src-port range 200 65535
egress: src-ip = 0.0.0.0/0 | ::/0; src-port range 200 65535
ingress: src-ip = host-ip-address; src-port eq 100
egress: src-ip = ip-prefix/length; src-port eq 100
ingress: src-ip = host-ip-address; src-port range 200 65535
egress: src-ip = ip-prefix/length; src-port range 200 65535
7750 SR RADIUS Attributes Reference Guide