Table of Contents
Advertisement
Defining Static Filters
Defining generic filters
Parameter
More
Settings in a RADIUS profile
In a RADIUS profile, you define a generic filter by assigning a value to the Ascend-Call Filter
or Ascend-Data Filter attribute, using the following format:
generic dir action offset mask value compare [more]
Keyword or argument
generic
dir
action
offset
mask
value
compare
more
15-8
Specifies
Enable/disable application of the next filter before determining
whether the packet matches the specification. If More is set to Yes,
the current specification is linked to the one immediately
following it, so the filter can examine multiple noncontiguous
bytes within a packet before the forwarding decision is made. The
match occurs only if both specifications are matched. (The
subsequent specification must be enabled, or the MAX unit
ignores the filter specification in which More is set to Yes.
Value
Type of filter. Valid filter types for the Ascend-Data Filter and
Ascend-Call Filter attributes are Generic Filter (the default) and IP
Filter.
Specifies direction of the packets. You can specify in (to filter
packets coming in to the MAX unit or out (to filter packets going
out of the MAX unit).
Defines the action that the MAX unit takes with a packet that
matches the filter. You can specify either forward or drop.
Byte-offset in a packet at which to start comparing packet contents
to the value specified in the filter. For details, see "Specifying
the offset to the bytes to be examined" on page 15-9.
A binary mask. The system applies the mask to the specified
value before comparing it to the bytes specified by offset. For
details, see "Masking the value before comparison" on
page 15-10.
A hexadecimal number to compare to the packet contents at the
specified offset. The length of the number must be the same as the
length of the mask (up to 12 bytes).
A comparison operator that determines how the MAX unit
compares packet contents to the filter value. You can specify =
(Equal) or != (Not Equal). Equal is the default.
If the more flag is present, the MAX unit applies the next filter
specification in the profile to the current packet before deciding
whether to forward or drop the packet. The direction and
forwarding action of the next filter must be the same as the current
filter, or the MAX unit ignores this flag.
MAX 6000/3000 Network Configuration Guide
Advertisement
Table of Contents
