Table of Contents
Advertisement
Creating and Applying Policies
•
•
MAC filter policies match criteria that associate traffic with an ingress or egress SAP. Matching
criteria to drop or forward MAC traffic include:
•
•
•
•
•
•
•
•
Page 314
Option present — Enabling the option presence allows the filter to search for presence or
absence of IP options in the packet. Padding and EOOL are also considered as IP options.
TCP-ACK/SYN flags — Entering a TCP-SYN/TCP-ACK flag allows the filter to search
for the TCP flags specified in these fields.
Frame type
Entering the frame type allows the filter to match for a specific type of frame format; for
example, Ethernet-II will match for only ethernet-II frames.
Source MAC address and mask
Entering the source MAC address range allows the filter to search for matching a source
MAC address and/or range. Enter the source MAC address and mask in the form of
xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx; for example, 00:dc:98:1d:00:00.
Destination MAC address and mask
Entering the destination MAC address range allows the filter to search for matching a
destination MAC address and/or range. Enter the destination MAC address and mask in
the form of xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx; for example, 02:dc:98:1d:00:01.
Dot1p and mask
Entering an IEEE 802.1p value or range allows the filter to search for matching 802.1p
frame. The Dot1p and mask accepts decimal, hex, or binary in the range of 0 to 7.
Ethertype
Entering an Ethernet type II Ethertype value to be used as a filter match criterion. The
Ethernet type field is a two-byte field used to identify the protocol carried by the Ethernet
frame. The Ethertype accepts decimal, hex, or binary in the range of 1536 to 65535.
IEEE 802.2 LLC SSAP
Specifying an Ethernet 802.2 LLC DSAP value allows the filter to match a source access
point on the network node designated in the source field of a packet. The SSAP and mask
accepts decimal, hex, and binary in the range of 0 to 255.
IEEE 802.2 LLC DSAP
Specifying an Ethernet 802.2 LLC DSAP value allows the filter to match a destination
access point on the network node designated in the destination field of a packet. The
DSAP and mask accepts decimal, hex, and binary in the range of 0 to 255.
IEEE 802.3 LLC SNAP PID
Specifying an Ethernet
protocol ID that follows the three-byte OUI field. The DSAP and mask accepts decimal
and hex in the range of 0 to 65535.
PID allows the filter to match the two-byte
IEEE 802.3 LLC SNAP
7450 ESS OS Router Configuration Guide
Advertisement
Table of Contents
