Applying Ip And Mac Filter Policies To A Service - Alcatel-Lucent 7705 Configuration Manual

Common Configuration Tasks
The following output displays a modified NAT policy output.
A:ALU-7>config>security# info
----------------------------------------------
..
..
----------------------------------------------
A:ALU-7>config>security#

Applying IP and MAC Filter Policies to a Service

Filter policies must be created before they can be applied to a service. Create filter policies in
the config>filter context.
The following CLI syntaxes show how to apply filter policies to services. Use the first CLI
syntax to apply an IP or MAC filter policy to a VPLS SAP, mesh SDP, or spoke SDP. Use
the second CLI syntax for Epipe or Ipipe services. Use the third CLI syntax for VPRN or IES
interface SAPs and spoke SDPs. (For IES SAPs, IPv6 ingress and egress filters can also be
applied.)
CLI Syntax:
310
policy 1 create
name "inbound policy"
description "common egress policy"
entry 1 create
description "Source NAT"
match
direction zone-inbound
exit
limit
action nat
profile 2
exit
entry 2 create
description "Dest NAT"
match local protocol udp
dst-port eq 4000
exit
limit
action nat destination 10.10.10.1 port 4000
profile 2
exit
commit
config>service# vpls service-id
sap sap-id
egress
ingress
filter ip ip-filter-id
filter ip ip-filter-id
filter mac mac-filter-id
7705 SAR OS Router Configuration Guide