Foundry Networks Switch and Router Installation And Configuration Manual page 1007

Policy or Filter Type
Router acceleration policy
• IP switching filter
• IPX switching filter
Route redistribution filters
• RIP
• OSPF
• BGP4
Default Filter Actions
By default, no policies or filters are defined on Foundry devices. The following table lists the default action when
no policy or filter is configured and the default action after you configure a policy or filter. For some types of
policies and filters, the default action changes once you configure a policy or filter, regardless of the policy or
filter's contents.
Policy or Filter Type
QoS policy
Cache server redirection policy
(applies only to ServerIron's
Transparent Cache Switching)
Access policy (see Forwarding
filters)
Forwarding filters
• MAC forwarding filters
• IP forwarding filters (same
as IP access policy)
• IPX forwarding filters
• TCP/UDP forwarding filters
Address-lock filter
December 2000
Table C.1: Scopes of Policies and Filters (Continued)
Table C.2: Default Policy and Filter Actions
Default action when no policies
or filters are configured
Queue all packets in normal or 0
priority queue
Deny all HTTP packets (do not
redirect to cache server)
See Forwarding filters
Permit (forward) all packets
Permit (forward) all packets
Scope
Configured globally, then applied either globally (on
Layer 2 Switches) or to individual ports (Layer 3
Switches). The filters are applied to an inbound or
outbound policy group. You can use the same policy in
an inbound policy group and outbound policy group.
For Layer 3 Switches, you also can use the same policy
on multiple ports.
Configured and applied globally
Default action after a policy or
filter is configured
Queue all packets in normal or 0
priority queue unless explicitly
configured for a higher queue
If global, redirect all HTTP packets;
if local, deny (do not redirect) all
HTTP packets except for ports to
which TCS policy is applied
See Forwarding filters
Deny (drop) all packets
Note: The default action for
AppleTalk zone and network filters
is always permit. To deny all but
specific zones, create permit filters
for those zones, then create a deny
filter and use the "additional zones"
value with the filter.
Permit only those packets whose
source MAC addresses have been
learned on the port; drop all others
Policies and Filters
C - 3