Table of Contents
Advertisement
IP Filters
•
•
•
Log Filter
•
•
•
•
•
•
•
•
•
•
7450 ESS OS Router Configuration Guide
Define filter entry packet matching criteria — If a filter policy is created with an entry and
entry action specified but the packet matching criteria is not defined, then all packets
processed through this filter policy entry will pass and take the action specified. There are
no default parameters defined for matching criteria.
Action — An action parameter must be specified for the entry to be active. Any filter entry
without an action parameter specified will be considered incomplete and be inactive.
When you configure a filter policy which is intended for filter-based mirroring, you must
specify that the scope is exclusive.
Summarization logging is the collection and summarization of log messages for 1 specific
log-id within a period of time.
Filter log can be applied to different filters or CPM hardware filters.
The implementation of the feature applies to filter logs with destination syslog.
In case of VPLS scenario both Layer 2 & Layer 3 are applicable.
→ Layer 2: Source MAC or optionally destination MAC
The summarization interval is 100 seconds.
Upon activation of a summary, a mini-table with src/dst-address and count is created for
each type (IP//MAC).
Every received log packet (due to filter hit) is examined for source or destination address.
If the log packet (source/destination address) matches a source/destination address entry in
the mini-table a packet received previously), the summary counter of the matching address
is incremented.
If source or destination address of the log messages does not match an entry already
present in the table, the source/destination address is stored in a free entry in the mini-
table.
In case the mini-table has no more free entries, only total counter is incremented.
At expiry of the summarization interval, the mini-table for each type is flushed to the
syslog destination.
Filter Policies
Page 323
Advertisement
Table of Contents
