Table of Contents
Advertisement
Defining Static Filters
Applying a filter to an interface
Settings in RADIUS profiles
The following RADIUS attribute-value pairs are used to apply a filter to a WAN connection:
Attribute
Ascend-Call Filter (243) An abinary-format filter specification using one of the following
Ascend-Data Filter (242) An abinary-format filter specification using one of the following
Ascend-Filter (90)
Filter-ID (11)
How the system uses the Answer Default parameter
When the Ethernet >Answer > Use Answer as Default parameter is set to Yes (the default), the
system creates a baseline profile for RADIUS-authenticated calls by using the settings in the
Use Answer As Defaults parameter. It retrieves the caller's configured profile from RADIUS
and uses the attribute-value pairs in the profile, so if the caller's profile applies a data filter or
call filter (or both), the MAX unit does not use the filters applied in the Use Answer As
Defaults parameter.
Attributes that are not specified in the caller's profile take their value from the Answer profile
settings. So if the caller's RADIUS profile does not apply a data filter or call filter, and the Use
15-26
Value
formats:
"generic dir action offset mask value compare
[more]"
"ip dir action [ dstip n.n.n.n/nn ] [ srcip
n.n.n.n/nn ][ proto ] [ destport cmp value ] [
srcport cmp value ] [est]]"
For details, see "Defining generic filters" on page 15-7 and
"Defining IP filters" on page 15-11.
formats:
"generic dir action offset mask value compare
[more]"
"ip dir action [ dstip n.n.n.n/nn ] [ srcip
n.n.n.n/nn ][ proto ] [ destport cmp value ] [
srcport cmp value ] [est]]"
For details, see "Defining generic filters" on page 15-7 and
"Defining IP filters" on page 15-11.
A string-format filter specification using the following format:
iptos dir [ dstip n.n.n.n/nn ] [ srcip n.n.n.n/nn
][ proto ] [ destport cmp value ] [ srcport cmp
value ][ precedence value ] [ type-of-service
value ]
For details, see "Defining Type of Service filters" on page 15-18.
Name of a local Filter profile that defines a data filter. The next
time the MAX unit accesses the RADIUS user profile in which
this attribute appears, the referenced filter is applied to the
connection.
MAX 6000/3000 Network Configuration Guide
Advertisement
Table of Contents
