Alcatel-Lucent 7750 SR OS Service Manual page 250

VLL Service Configuration Commands
Description
This command associates an IP filter policy with an ingress or egress Service Access Point (SAP) or
IP interface.
Filter policies control the forwarding and dropping of packets based on IP matching criteria. Only one
filter can be applied to a SAP at a time.
The filter command is used to associate a filter policy with a specified filter-id with an ingress or
egress SAP. The filter-id must already be defined before the filter command is executed. If the filter
policy does not exist, the operation will fail and an error message returned.
IP filters apply only to RFC 2427-routed IP packets. Frames that do not contain IP packets will not be
subject to the filter and will always be passed, even if the filter's default action is to drop.
The no form of this command removes any configured filter ID association with the SAP or IP
interface. The filter ID itself is not removed from the system unless the scope of the created filter is
set to local. To avoid deletion of the filter ID and only break the association with the service object,
use scope command within the filter definition to change the scope to local or global. The default
scope of a filter is local.
Note that IPv6 filters are not supported on a Layer 2 SAP that is configured with QoS MAC criteria.
Also, MAC filters are not supported on a Layer 2 SAP that is configured with QoS IPv6 criteria.
Special Cases Epipe — Both MAC and IP filters are supported on an Epipe service SAP.
Parameters
ip ip-filter-id — Specifies IP filter policy. The filter ID must already exist within the created IP filters.
ipv6 ipv6-filter-id — Specifies the IPv6 filter policy. The filter ID must already exist within the
mac mac-filter-id — Specifies the MAC filter policy. The specified filter ID must already exist within
filter
Syntax filter [ip ip-filter-id]
filter [ipv6 ipv6-filter-id]
no filter [ip ip-filter-id] [ipv6 ipv6-filter-id]
Context config>service>fpipe>sap>egress
config>service>fpipe>sap>ingress
config>service>fpipe>spoke-sdp>egress
config>service>fpipe>spoke-sdp>ingress
config>service>ipipe>spoke-sdp>egress
config>service>ipipe>sap>ingress
config>service>ipipe>sap>egress
config>service>ipipe>spoke-sdp>ingress
Description
This command associates a filter policy with an ingress or egress Service Access Point (SAP) or IP
interface.
Filter policies control the forwarding and dropping of packets based on IP matching criteria. Only one
filter can be applied to a SAP at a time.
Page 250
Values
1 — 65535
created IPv6 filters.
Values
1 — 65535
the created MAC filters. The filter policy must already exist within the created MAC filters.
Values
1 — 65535
7750 SR OS Services Guide