Creating Packet Filters - Network Critical SmartNA-X User Manual

U P F | C
SING ACKET ILTERS REATING PACKET FILTERS
SmartNA-X allows you to add multiple filters to a map line and specify different pass or block settings for each.
This allows you to easily create complex rules to limit output to a precise subnet of data. You can even set up
logical AND/OR rules by using one of more map lines with filters applied, as follows:
• For a logical AND rule, use several filters on a single map line. Packets will pass if they match all of the specified
conditions for all of the map lines.
• For a logical OR rule, use one (or more) filters on two or more map lines connected to the same destination
port. Packets will pass if they match all of the specified filter conditions for any one of the map lines.
Note: If there are multiple map lines between the same pair of ports, and a packet matches all required filter
conditions for more than one of the maps, this will not result in multiple copies of the packet being delivered to the
destination port.

Creating packet filters

You can create filters in the web UI or CLI. We suggest using the SmartNA-X web UI wherever possible as it
provides plenty of assistance when making filter selections and will disable options which are not applicable for a
particular packet type.
Using the web UI to create filters
Log in to the web UI.
1.
In the browser, click on the main part of the appliance to access the system management settings.
2.
From the options, select the Filters tab. Any filters which have already been set up will be listed. You can edit an
3.
existing filter by clicking on the icon, or you can create a new filter by clicking Add new filter. In both cases,
the filter set up dialog window appears where you can set up the filtering conditions.
Fill in the filtering conditions as required. Every filter must have a name (filter names are case-sensitive), but all
4.
other settings are optional unless required to complete the option selected.
For instance, if you elect to filter on destination address, you must enter a valid IP address before you will be
allowed to save the filter. Fields highlighted in red indicate that field is mandatory or an invalid value has been
entered. Refer to the online information for help with entering filter conditions.
For the IP protocol field, if the required protocol is not listed, you may select Other and enter an ISO
designator numeric value (see
values if filtering on several protocols.
Click Add filter when you have finished setting up the filter.
5.
Click Review/apply and review the changes you have made, and then click Apply to implement your changes.
6.
Note: By default, all filters are created with 'ignore' status. Which means, filters will ignore packets (not filter)
unless specifically set to 'require' or 'exclude' status on a selected map line. See the
on page 56
Using the CLI to create filters
To create packet filters in the CLI, use the appropriate set filter command for the packet type you want to filter on
(IPv4, IPv4, ARP, MPLS, or any IP packets). You can use the show filter command to output details of any filters
which currently exist on the system.
For example, to create a filter with the following conditions:
Appendix H,"IP
for instructions on adding filters.
S NA™ 10G N
MART
Protocols", page 225), or a comma-separated list of multiple
DRAFT
A (S NA-X)
ETWORK CCESS MART
"Adding filters to maps" section
55