Common Configuration Tasks
This section provides a brief overview of the tasks that must be performed for IP filter
configuration and provides the CLI commands.
Creating an IPv4 or IPv6 Filter Policy
Configuring and applying filter policies is optional. Each filter policy must have the
following:
IP Filter Policy
Use the following CLI syntax to create a template IPv4 or IPv6 filter policy:
CLI Syntax:
7705 SAR OS Router Configuration Guide
•
Creating an IPv4 or IPv6 Filter Policy
•
Creating a MAC Filter Policy
•
Creating a VLAN Filter Policy
•
Configuring Filter Log Policies
•
Configuring a NAT Security Profile
•
Configuring a NAT Security Policy
•
Applying IP and MAC Filter Policies to a Service
•
Applying IP Filter Policies to Network Interfaces
•
Applying VLAN Filter Policies to a Ring Port
•
the filter type specified (IP)
•
a filter policy ID
•
a default action (drop or forward)
•
scope specified, either exclusive or template
•
at least one filter entry with matching criteria specified
config>filter# ip-filter filter-id [create]
description description-string
scope {exclusive | template}
default-action {drop | forward}
Filter Policies
293