Eth Ip Filter - Efficient Networks Router family Command Line Interface Manual

Chapter 5: Ethernet Interface Commands

eth ip filter

Manages the IP filters for the Ethernet interface(s). The filters are used to screen IP
packets.
Each Ethernet interface can have its own set of filters. The intended interface is
designated at the end of the filter command. If the router has two physical Ethernet
interfaces (an Ethernet hub router), the interface is designated by its port number (0
or 1). If logical interfaces have been defined to provide service to multiple IP subnets,
the logical interface number is also specified (port #:<logical #, for example, 0:1).
Each interface can have filter lists that are applied at up to four points in the process:
Input, Receive, Transmit, and Output. For more information on how and when the
filter types are applied, refer to
Guide.
NOTE:
IP filters take effect immediately upon entry. They can even affect the current
connection that you are using to enter commands. Unlike other configuration
changes, you do not need to save and reboot or restart.
Mgmt Class
Security (R/W)
Input Format
eth ip filter <command> <type> <action> [<parameters>]
[<interface>]
The following <commands> are provided for managing IP filters for an Ethernet
interface:
eth ip filter append
eth ip filter append [<line number>] <type> <action> [<parameters>] [<interface>]
Appends a filter to the list of filters for this <type> and <interface> . The filter is
specified by the <action> and optional <parameters> .
If no line number is specified, the filter is appended to the end of the list; otherwise, it
is appended after the specified line. For example, " append 0 " appends the filter after
line 0. Filters are used in the order they appear in their list.
eth ip filter insert
eth ip filter insert [<line number>] <type> <action>
<parameters> [<interface>]
Page 5-20
"IP Filtering" on page 5-23
®
Efficient Networks Router family
Command Line Interface Guide
of the Technical Reference
Efficient Networks
®