Ip Filter Entry - Alcatel-Lucent 7705 Configuration Manual

The following example displays an exclusive filter policy configuration.
A:ALU-7>config>filter# info
----------------------------------------------
...
...
----------------------------------------------
A:ALU-7>config>filter#

IP Filter Entry

Within a filter policy, configure filter entries that contain criteria against which ingress,
egress, and network traffic is matched. The action specified in the entry determines how the
packets are handled, either dropped or forwarded.
The forward next-hop command is used to implement policy-based routing. For details,
see
router to which packets with matching criteria will be forwarded. The forward fc
command is used to implement multi-field classification. For details, see
Classification
Use the following CLI syntax to create an IP filter entry:
CLI Syntax:
Example:
7705 SAR OS Router Configuration Guide
ip-filter 11 create
description "filter-main"
scope exclusive
exit
• Enter a filter entry ID. The system does not dynamically assign a value.
• Assign an action, either drop or forward.
• Specify matching criteria (see
Policy-Based Routing. Use the indirect keyword to identify the indirect next-hop
(MFC).
config>filter# ip-filter filter-id [create]
entry entry-id
config>filter# ip-filter 11
config>filter>ip-filter# entry 10 create
config>filter>ip-filter>entry$ description "no-91"
config>filter>ip-filter>entry$ action drop
config>filter>ip-filter>entry# exit
IP Filter Entry Matching
description description-string
action [drop]
action forward [next-hop {ip-address | indirect
ip-address}] [fc fc-name [priority low |
high]]
Filter Policies
Criteria).
Multi-field
295