Dialer-Group Rule - H3C MSR Series Command Reference Manual

dialer-group rule

Use dialer-group rule to create a dialer access group and configure a dial access rule for it.
Use undo dialer-group rule to remove the configuration.
Syntax
dialer-group group-number rule { protocol-name { deny | permit } | acl { acl-number | name acl-name } }
undo dialer-group group-number rule
Views
System view
Predefined user roles
network-admin
Parameters
group-number: Number of a dialer access group, in the range of 1 to 255.
protocol-name: Network protocol, which can only take ip.
deny: Denies packets of the specified protocol.
permit: Permits packets of the specified protocol.
acl-number: Specifies an ACL by its ACL number in the range of 2000 to 3999.
name acl-name: Specifies an ACL by its name.
Usage guidelines
You can configure a dial access rule to filter traffic that traverses a dialup interface. Packets include two
categories, depending on whether they are in compliance with the permit or deny statements in the dial
access rule.
Interesting packets—Packets that match a permit statement or that do not match any deny
•
statements. When receiving such a packet, DDR either sends it out if a link is present and resets the
idle-timeout timer or originates a new call to set up a link if no link is present.
Uninteresting packets—Packets that do not match any permit statements or that match a deny
•
statement. When receiving such a packet, DDR either sends it out without resetting the idle-timeout
timer if a link is present, or drops it without originating calls for link setup if no link is present.
For DDR to forward packets correctly, you must configure a dial access rule and associate it with the
dialup interface (physical or dialer interface) by using the dialer-group command.
If no dial access rule is configured for the dialer access group associated with a dialup interface, DDR
will drop received packets on the interface as uninteresting ones.
Examples
#Create dialer access group 1, configure DDR to trigger calls for IP packets, and associate interface
Serial 2/0 with dialer access group 1.
<Sysname> system-view
[Sysname] dialer-group 1 rule ip permit
[Sysname] interface serial 2/0
[Sysname-Serial2/0] dialer-group 1
152