Applying Filters - Alcatel-Lucent 7210 SAS M Configuration Manual

Applying Filters

After filters are created, they can be applied to the following entities:
•
•
Applying a Filter to a SAP
During the SAP creation process, ingress and egress filters are selected from a list of qualifying IP
and MAC filters. When ingress filters are applied to a SAP, packets received at the SAP are
checked against the matching criteria in the filter entries. If the packet completely matches all
criteria in an entry, the checking stops and an entry action is preformed. If permitted, the traffic is
forwarded according to the specification of the action. If the packets do not match, the default filter
action is applied. If permitted, the traffic is forwarded.
When egress filters are applied to a SAP, packets received at the egress SAP are checked against
the matching criteria in the filter entries. If the packet completely matches all criteria in an entry,
the checking stops. If permitted, the traffic is transmitted. If denied, the traffic is dropped. If the
packets do not match, the default filter action is applied.
Filters can be added or changed to an existing SAP configuration by modifying the SAP
parameters. Filter policies are not operational until they are applied to a SAP and the service
enabled.
Applying a Filter to a Network IP Interface
An IP filter can be applied to a network portIP interface. Packets received on the interface are
checked against the matching criteria in the filter entries. If the packet completely matches all
criteria in an entry, the checking stops. If permitted, the traffic is forwarded. If the packets do not
match, they are discarded or forwarded based on the default action specified in the policy.
7210 SAS M, X Router Configuration Guide
Applying a Filter to a SAP on page 99
Applying a Filter to a Network IP Interface on page 99
Filter Policies
Page 99