Applying Filters - Alcatel-Lucent 7210 SAS E OS Configuration Manual

Creating and Applying Policies

Applying Filters

After filters are created, they can be applied to the following entities:
•
•
Applying a Filter to a SAP
During the SAP creation process, ingress and egress filters are selected from a list of qualifying IP
and MAC filters. When ingress filters are applied to a SAP, packets received at the SAP are
checked against the matching criteria in the filter entries. If the packet completely matches all
criteria in an entry, the checking stops and an entry action is preformed. If permitted, the traffic is
forwarded according to the specification of the action. If the packets do not match, the default filter
action is applied. If permitted, the traffic is forwarded.
When egress filters are applied to a SAP, packets received at the egress SAP are checked against
the matching criteria in the filter entries. If the packet completely matches all criteria in an entry,
the checking stops. If permitted, the traffic is transmitted. If denied, the traffic is dropped. If the
packets do not match, the default filter action is applied.
Filters can be added or changed to an existing SAP configuration by modifying the SAP
parameters. Filter policies are not operational until they are applied to a SAP and the service
enabled.
Applying a Filter to an IES Interface
An IP filter can be applied an IES SAP. Packets received on the interface are checked against the
matching criteria in the filter entries. If the packet completely matches all criteria in an entry, the
checking stops. If permitted, the traffic is forwarded. If the packets do not match, they are
discarded or forwarded based on the default action specified in the policy.
Page 72
Applying a Filter to a SAP on page 72
Applying a Filter to an IES Interface on page 72