Table of Contents
Advertisement
8-86 User's Reference Guide
If you chose Generic filtering in step
Enabled:
Forward:
Type...
Value:
Mask:
Offset:
Compare:
Chain to Next Filter:
ADD THIS FILTER NOW
Enter the IP specific information for this filter.
Note: Generic filters are more complicated to use than IP filters. If you plan to filter only IP traffic, we
recommend that you use IP filters instead.
Generic filters are performed on packets as a whole, after layer 2 encapsulation is removed (ATM-FUNI or Frame
Relay). You configure them in much the same way as the IP version.
The Value and Mask fields can be 8 bytes in length, two characters per byte, so for example a MAC
address is 6 bytes: 00-00-C5-60-34-74.
The Value, Mask, and Offset are used together to determine if the packet matches the filter. The Value is
logically ANDed with the Mask; the Offset specifies the number of bytes into the packet where the Value
ANDed with the Mask must be present. If these match, the filter matches the packet.
Several Generic Filters can be ANDed together by toggling Chain to Next Filter to Yes. In this case all the
filters chained must match the packet, and the last filter in the chain determines the Forwarding decision.
The Compare field works as it does in the Filter version
3.
on
page
8-82, the Add Filter screen changes as shown:
Add Filter
Yes
No
Generic
000000000000
000000000000
0
Equal
No
CANCEL
Advertisement
Table of Contents
