Efficient Networks Router family Command Line Interface Manual page 160

Chapter 5: Ethernet Interface Commands
eth ip filter check
eth ip filter check <type> <parameters> [<interface>]
Checks the action that would be taken if a packet with the specified parameters was
compared with the list of filters defined for the specified <type> and <interface> .
For example, the command:
-> eth ip filter check input -p TCP 1
would check what action (accept, drop, reject, inipsec, outipsec) would be taken for a
TCP packet after it was compared with the list of input filters defined for port 1.
eth ip filter list
eth ip filter list <type> [<interface>]
Lists all filters of the specified <type> defined for the specified <interface> .
eth ip filter watch
eth ip filter watch <on | off> [-q | -v] [<interface>]
Enables or disables the console watch for the interface. If the watch is on, a message
is printed to the console serial port when a packet is dropped or rejected. (The
message is also sent to any Syslog servers; see
However, if the parameter -q (quiet) was specified for a filter, no message is printed
when that filter matches a packet. If the parameter -v (verbose) was specified for a
filter, a message is printed whenever that filter matches a packet, regardless of the
filter <action>.
To see the messages, Telnet to the router and enter system log start. The watch does
not continue after a reboot; to resume the watch after a reboot, you must enter the
ip filter watch
Parameters
The filter <type> specifies at which point the filter is compared to the IP packet (see
the illustration under
Guide.):
input
receive
transmit
output
Page 5-22
on command again.
"Filters and Interfaces" on page 5-23
When the packet enters the interface, before any network address
translation is performed.
When the packet enters the interface, after any network address
translation, but before routing table processing.
After routing table processing, before any network address transla-
tion before the packet is sent out.
After routing and network address translation, just before the packet
is sent out.
Efficient Networks
Command Line Interface Guide
"Syslog Client" on page
of the Technical Reference
Efficient Networks
®
Router family
7-1.)
eth
®