Chelsio Communications Terminator Series Installation And User Manual page 290

Chapter XX. Classification and Filtering
ii. Select a filterMask so that it is a subset of or equal to filterMode based on application
without VLAN tuple. E.g.;
filterMask = fragmentation, mpshittype, protocol, port, fcoe
Here, we have selected fragmentation, mpshittype, protocol, port, fcoe in filterMask so it is
mandatory to create a filter based on only those tuples mentioned in filterMask. Otherwise, filter
rule will not honour.
iii. Now, to create a hash filter based on the filterMode and filterMask values selected above:
[root@indus sw]# cxgbtool eth18 filter 100 action drop lip 120.10.10.100 fip
120.10.10.200 lport 5001 fport 51549 proto 6 frag 0 matchtype 0
fcoe 0 hitcnts 1 cap maskless
Hash-Filter Index = 196568
Examples
•
drop action
[root@host~]# cxgbtool ethX filter 496 action drop lip 102.1.1.1 fip
102.1.1.2 lport 12865 fport 20000 hitcnts 1 cap maskless iport 1 proto 17
Hash-Filter Index = 61722
The above filter rule will drop all UDP packets matching above 4 tuple coming on Chelsio port 1.
Remaining packets will be sent to the host.
•
pass action
[root@host~]# cxgbtool ethX filter 496 action pass lip 102.2.2.1 fip
102.2.2.2 lport 12865 fport 12000 hitcnts 1 cap maskless proto 6
Hash-Filter Index = 308184
The above filter rule will pass all TCP packets matching above 4 tuple. Remaining packets will be
sent to the host.
•
switch action
[root@host~]# cxgbtool ethX filter 496 action switch lip 102.3.3.1 fip
102.3.3.2 lport 5001 fport 16000 iport 0 eport 1 hitcnts 1 cap maskless
Hash-Filter Index = 489090
Chelsio Unified Wire for Linux
iport 0
290