Table of Contents
Advertisement
•
•
•
•
MAC filter policies match criteria that associate traffic with an ingress or egress SAP. Matching
criteria to drop or forward MAC traffic include:
•
•
•
•
•
•
•
7710 SR OS Router Configuration Guide
Fragmentation — IPv4 only: Enable fragmentation matching. A match occurs if packets
have either the MF (more fragment) bit set or have the Fragment Offset field of the IP
header set to a non-zero value.
Option value — Entering an option value enables the first filter to search for a specific IP
option.
Option present — Enabling the option presence allows the filter to search for presence or
absence of IP options in the packet. Padding and EOOL are also considered as IP options.
TCP-ACK/SYN flags — Entering a TCP-SYN/TCP-ACK flag allows the filter to search
for the TCP flags specified in these fields.
Frame type
Entering the frame type allows the filter to match for a specific type of frame format; for
example, Ethernet-II will match for only ethernet-II frames.
Source MAC address and mask
Entering the source MAC address range allows the filter to search for matching a source
MAC address and/or range. Enter the source MAC address and mask in the form of
xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx; for example, 00:dc:98:1d:00:00.
Destination MAC address and mask
Entering the destination MAC address range allows the filter to search for matching a
destination MAC address and/or range. Enter the destination MAC address and mask in
the form of xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx; for example, 02:dc:98:1d:00:01.
Dot1p and mask
Entering an IEEE 802.1p value or range allows the filter to search for matching 802.1p
frame. The Dot1p and mask accepts decimal, hex, or binary in the range of 0 to 7.
Ethertype
Entering an Ethernet type II Ethertype value to be used as a filter match criterion. The
Ethernet type field is a two-byte field used to identify the protocol carried by the Ethernet
frame. The Ethertype accepts decimal, hex, or binary in the range of 1536 to 65535.
IEEE 802.2 LLC SSAP
Specifying an Ethernet 802.2 LLC DSAP value allows the filter to match a source access
point on the network node designated in the source field of a packet. The SSAP and mask
accepts decimal, hex, and binary in the range of 0 to 255.
IEEE 802.2 LLC DSAP
Specifying an Ethernet 802.2 LLC DSAP value allows the filter to match a destination
access point on the network node designated in the destination field of a packet. The
DSAP and mask accepts decimal, hex, and binary in the range of 0 to 255.
Filter Policies
Page 311
Advertisement
Table of Contents
