Configuring Filters For A Vpn Tunnel; Setting Filter Access Using Cli; Managing Filters Using Cli; Displaying The Managed Filter List Using Cli - 3Com OfficeConnect Remote 812 Cli User's Manual

Configuring Filters for a
VPN Tunnel
Setting Filter Access
Using CLI
Managing Filters
Using CLI
Displaying the Managed
Filter List Using CLI
Adding Filters to the
Managed List Using CLI
To configure filters for a VPN tunnel, use the following commands:
set tunnel <tunnel name> input_filter <filter_name>
set tunnel <tunnel name> output_filter <filter_name>
For more information about configuring a VPN Tunnel (including information
about configuring filters), see
Creating a VPN Tunnel Using 812 Default
When filters are assigned to both the WAN interface and a VC/remote site profile,
you need to tell the router which one to use using the filter access parameter. If
filter access is ON, the VC / remote site filters will override interface filters. If filter
access is OFF, then the interface filters are used.
Always turn filter access OFF for the Ethernet interface since there are no profiles
associated with it. If you do not turn if off, the filter will not be applied.
To set the filter access parameter to ON for a specific interface, use the CLI
command
set interface <interface_name> filter_access ON
To set the filter access parameter to OFF for a specific interface, use the CLI
command
set interface <interface_name> filter_access OFF
This section provides information about how to perform filter management tasks.
To display the list of managed filters, use the following command:
list filters <filter_name>
The resulting display might look like this:
Filter Name Status
ip.fil NORMAL
The add filter command verifies filter syntax prior to adding the filter to the
managed list. If the syntax is valid, no message is generated and the command
prompt returns. If syntax errors exist, error messages are generated detailing the
cause of the errors.
If the syntax is invalid, the filter is still added to the managed list with a status of
verify failed. To correct filter file errors, you must make the changes to the original
filter file using a text editor, and re-TFTP the file to the router's FLASH memory.
Then use the verify filter command to check the filter file syntax.
To add a filter file to the list of managed filters, use the CLI command
add filter <filter name>
Setting Up a Virtual Private Network (VPN)
Values, and
Protocols
IP IP-RIP
Tunnel,
Tunnel Commands.