Table of Contents
Advertisement
IP Filters
•
•
Log Filter
•
•
•
•
•
•
•
•
•
•
7450 ESS OS Router Configuration Guide
IP filters are used for IPv4 traffic only. IPv6 filters are to be used for IPv6 traffic. If a filter
policy is created with an entry and entry action specified but the packet matching criteria
is not defined, then all packets processed through this filter policy entry will pass and take
the action specified. There are no default parameters defined for matching criteria.
An action parameter must be specified for the entry to be active. Any filter entry without
an action parameter specified will be considered incomplete and be inactive.
Summarization logging is the collection and summarization of log messages for 1 specific
log-id within a period of time.
Filter log can be applied to different filters or CPM hardware filters.
The implementation of the feature applies to filter logs with destination syslog.
In case of VPLS scenario both Layer 2 & Layer 3 are applicable.
Layer 2: Source MAC or optionally destination MAC
The summarization interval is 100 seconds.
Upon activation of a summary, a mini-table with src/dst-address and count is created for
each type (IP//MAC).
Every received log packet (due to filter hit) is examined for source or destination address.
If the log packet (source/destination address) matches a source/destination address entry in
the mini-table a packet received previously), the summary counter of the matching address
is incremented.
If source or destination address of the log messages does not match an entry already
present in the table, the source/destination address is stored in a free entry in the mini-
table.
In case the mini-table has no more free entries, only total counter is incremented.
At expiry of the summarization interval, the mini-table for each type is flushed to the
syslog destination.
Filter Policies
Page 371
Advertisement
Table of Contents
