Applying A Packet Filter To An Interface; Deleting Rules From Packet Filters - Nortel Secure 4134 Configuration

Variable
[smask <src-mask>]
[dmask <dst-mask>]
[ethertype <ether-type>]
[cos <cos-value>]
[vlan <vlan-id>]
[no]
Applying a packet filter to an interface
Apply a packet filter to an interface. With WAN modules and chassis
Ethernet ports, you can apply one IPv4 and one IPv6 packet filter to an
interface in either direction (you cannot enable the IPv4 packet filter and the
firewall on the same interface). With Ethernet module interfaces, you can
apply one IPv4, one IPv6, and one MAC packet filter in the inbound direction
only (no restrictions related to firewalls apply).
Procedure steps
Step
1
2
Deleting rules from packet filters
Delete rules from configured packet filters.
Procedure steps
Step
1
2
Copyright © 2007, Nortel Networks
.
Value
Specifies MAC source mask.
Specifies MAC destination mask.
Specifies the Ethernet type: arp, mpls, aarp, ppp or
Ethernet type value in hex.
CoS value. Range is 0-7.
Specifies the VLAN ID. Range is 1-4000.
Removes the specified packet filter.
Action
To enter configuration mode, enter:
configure terminal
Apply an existing packet filter rule set to the interface, enter:
packet-filter-group <interface-name> [in | out] {[mac
<mac-packet-filter>] | [ip <ip-packet-filter>] | [ipv6
<ipv6-packet-filter>]}
Action
To enter configuration mode, enter:
configure terminal
To specify the packet filter to create or configure, enter:
{mac | ip | ipv6} packet-filter <packet-filter-name>
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600 01.02 Standard
10.0 3 August 2007
Deleting rules from packet filters 113
—End—