Network Critical SmartNA-X User Manual page 150

C L I R
OMMAND INE NTERFACE EFERENCE
S
ET FILTER ANYIP
Use the set filter anyip command to create a filter for IPv4 or IPv6 packets. If no other conditions are specified,
the filter matches all IP packets. Additional conditions can be specified to further refine the match conditions. For
example, specifying the VLAN number limits matches to those IP packets which have the specified VLAN header
information. Multiple conditions can also be specified where all conditions must be satisfied before a filter is
considered a match. Packets matching an applied filter will either be passed or dropped, depending the criteria
specified in the set map command.
Command form set filter name-string anyip [anyip-conditions ...]
name-string
anyip-conditions
|
Specifies the filter name. It may contain spaces, but if it does, it must be contained in
quotes "..."; the name itself may not contain the quotes character.
(Optional) Provides additional filtering conditions for the specified protocol. All
conditions must be satisfied for the filter to match. For IP packets, the following
additional filtering conditions may be specified:
[ vl-value] (Optional) Filters on the specified value matching the VLAN number.
vlan
For vl-value, the following formats are recognized:
• 100 – A single tag
• 100–110 – A range (inclusive)
• 0/1 – A value/mask pair (here: all even tags)
• 100,150 – Multiple tags. Use commas (no spaces) to separate VLANs.
The following caveats should be noted when filtering by VLAN:
• When a filter is set to permit VID 1, untagged packets will still be forwarded.
• Tagged packets with a VID of 1 will be forwarded untagged.
• Tagged packets with a VID of 0 will be dropped by SmartNA-X.
[ mac-value] (Optional) Filters on the specified value matching the source
mac src
MAC address. For mac-value, the following formats are recognized:
• 01:23:45:67:89:ab – A single address
• 01:23:45:67:89:ab,01:23:45:67:89:ac – Multiple addresses. Use commas (no
spaces) to separate addresses.
• [ mac-value] (Optional) Filters on the specified value matching the
mac dest
destination MAC address.
• [ mac-value] (Optional) Filters on the specified value matching either the
mac either
source or destination MAC address.
[ ptcl-value] (Optional) Filters on the specified value matching the specified
protocol
protocol type. ptcl-value may be an Assigned Internet Protocol Number or one of the
following keywords:
S NA™ 10G N
MART
, , ,
TCP UDP ICMPV4 TCP_UDP
DRAFT
A (S NA-X)
ETWORK CCESS MART
.
145