Alcatel-Lucent 7450 Configuration Manual page 440

Filter Policy Basics
not supported as this may lead to undesired behavior. Some match criteria may be grouped in
match lists and may be auto-generated based on router configuration – see Advanced Filter Policy
topics for more details.
Basic L3 match criteria:
•
•
•
Conditional action match criteria:
•
Fragmentation match criteria:
IPv4 options match criteria:
•
•
•
•
Page 440
dscp — Match for the specified DSCP value against the Differentiated Services Code
Point/Traffic Class field in the IPv4/v6 packet header.
src-ip/dst-ip — Match for the specified source/destination IPv4 address-prefix against the
source/destination IPv4 address field in the IPv4 packet header. Operator can optionally
configure a mask to be used in a match.
packet-length — Match for the specified packet-length value/range against the Total
Length field in IPv4 packet header or Payload Length field in IPv6 packet header. This
match condition is supported for drop action only and is part of action evaluation – i.e.
after packet is determined to match the entry based on other match criteria configured.
Packets that match all match criteria for a given filter policy entry are dropped if the
packet-length match criterion is met and forwarded if the packet match criterion is not met.
When a filter entry with a packet-length condition is used as a mirror source, only
forwarded packets are mirrored. Supported for ingress filters only. Requires minimum FP-
2 based line cards. The packet-length match condition is always true if a filter is
configured on egress or on older H/W.
fragment — Enable fragmentation support in filter policy match. For IPv4, match against
MF bit or Fragment Offset field to determine whether the packet is a fragment or not.
ip-option — Match for the specified option value in the first option of the IPv4 packet.
Operator can optionally configure a mask to be used in a match.
option-present — Match for the presence or absence of the IP options in the IPv4 packet.
Padding and EOOL are also considered as IP options. Up to 6 IP options are matched
against.
multiple-options — Match for the presence of multiple IP options in the IPv4 packet.
src-route-option — Match for the presence of IP Option 3 or 9 (Loose or Strict Source
Route) in the first 3 IP Options of the IPv4 packet. A packet will also match this rule if the
packet has more than 3 IP Options.
7450 ESS Router Configuration Guide