Ordering Filter Entries; Table 43 Vlan Filter Policy Criteria - Alcatel-Lucent 7705 Configuration Manual

Criteria
VLAN ID or VLAN range
Untagged

Ordering Filter Entries

When entries are created, they should be arranged sequentially from the most explicit entry
to the least explicit. Filter matching ceases when a packet matches an entry. The entry action
is performed on the packet, either drop or forward. To be considered a match, the packet must
meet all the conditions defined in the entry.
Packets are compared to entries in a filter policy in ascending entry ID order. To reorder
entries in a filter policy, for example, to reposition entry ID 6 as entry ID 2, use the renum
command (renum 6 2).
When a filter policy consists of a single entry, the filter executes actions as follows.
If a filter policy contains two or more entries, packets are compared in ascending entry ID
order (for example, 1, 2, 3 or 10, 20, 30).
7705 SAR OS Router Configuration Guide
Table 43: VLAN Filter Policy Criteria
Description
Entering a VLAN identifier or range allows the filter to match VLAN ID values
Selecting untagged allows the filter to match on Ethernet frames with no tag or
dot1q header. Having no tag or dot1q header is also referred to as null
encapsulation.
• If a packet matches all the entry criteria, the entry's specified action is performed
(drop or forward).
• If a packet does not match all of the entry criteria, the policy's default action is
performed (drop or forward).
• Packets are compared with the criteria in the first entry ID.
• If a packet matches all the properties defined in the entry, the entry's specified action
is executed.
• If a packet does not completely match, the packet continues to the next entry, and
then subsequent entries.
• If a packet does not completely match any subsequent entries, the default action is
performed (drop or forward).
Note: By default, all created filters have a default action of drop (implicit drop). That is, if
none of the entries in the filter match the packet, and a default action is not explicitly
configured by the user, the packet is dropped.
Filter Policies
285