Applying (Ipv4/V6) Filter Policies To A Network Port - Alcatel-Lucent 7710 SR OS Configuration Manual

Common Configuration Tasks

Applying (IPv4/v6) Filter Policies to a Network Port

IP filter policies can be applied to network IP (v4/v6)interfaces. MAC filters cannot be applied to
network IP interfaces or to routable IES services. Similarly to applying filter policies to service, IP
(v4/v6) filter policies are applied to network interfaces by associating a policy with ingress and/or
egress direction as desired. Filter ID is used to associate an existing filter policy, or if defined, a
Filter Name for that Filter ID policy can be used in the CLI.
The following displays an IP filter applied to an interface at ingress.
A:ALA-48>config>router# info
#------------------------------------------
# IP Configuration
#------------------------------------------
...
...
#------------------------------------------
A:ALA-48>config>router#
The following displays IPv4 and IPv6 filters applied to an interface at ingress and egress.
A:config>router>if# info
----------------------------------------------
----------------------------------------------
A:config>router>if#
Page 384
interface "to-104"
address 10.0.0.103/24
port 1/1/1
ingress
filter ip 10
exit
egress
filter ip "default network egress policy"
exit
exit
port 1/1/1
ipv6
address 3FFE::101:101/120
exit
ingress
filter ip 2
filter ipv6 1
exit
egress
filter ip 2
filter ipv6 1
exit
7710 SR OS Router Configuration Guide