Lucent Technologies 6000 - Manual (Page 540)

15-4 MAX 6000/3000 Network Configuration Guide
Defining Static Filters
Filter overview
5 If the Dst Port Cmp parameter is not set to None, compare the Dest Port # number to the
destination port number of the packet. If they do not match as specified by the Dst Port
Cmp parameter, the comparison fails.
6 If TCP Estab is set to Yes and the protocol number is 6, the comparison succeeds.
If an IP filter is applied as a call filter and a comparison succeeds, the forwarding action is
either to reset the idle timer or not, depending on how the filter is defined. If an IP filter is
applied as a data filter, the forwarding action is either to forward the packet or drop it.
Type of Service filters
In an IP TOS filter, each filter specification includes a set of comparisons that are made in a
defined order. When a comparison fails, the packet undergoes the next comparison. When a
comparison succeeds, the filtering process stops and the action specified in that filter is applied
to the packet. The TOS filter tests proceed in the following order:
1 Apply the Src Mask value to the Src Adrs value and compare the result to the source
address of the packet. If they are not equal, the comparison fails.
2 Apply the Dst Mask value to the Dst Adrs value and compare the result to the destination
address in the packet. If they are not equal, the comparison fails.
3 If the Protocol parameter is zero (which matches any protocol), the comparison succeeds.
If it is nonzero and not equal to the protocol field in the packet, the comparison fails.
4 If the Src Port Cmp parameter is not set to None, compare the Src Port # number to the
source port number of the packet. If they do not match as specified by the Src Port Cmp
parameter, the comparison fails.
5 If the Dst Port Cmp parameter is not set to None, compare the Dest Port # number to the
destination port number of the packet. If they do not match as specified by the Dst Port
Cmp parameter, the comparison fails.
If a comparison succeeds, the system sets the precedence bits and class of service (depending
on how the filter is defined) in the TOS header of the packet.
IPX filters
In an IPX filter, each filter specification includes a set of comparisons that are made in a
defined order. When a comparison fails, the packet undergoes
the next comparison. When a
comparison succeeds, the filtering process stops and the forwarding action in that filter is
applied to the packet. The IPX filter tests proceed in the following order:
1 Compare the Src Net Adrs number to the source network number of the packet. If they are
not equal, the comparison fails.
2 Compare the Dst Net Adrs number to the destination network number in the packet. If
they are not equal, the comparison fails.
3 Compare the Src Node Adrs number to the source node number of the packet. If they are
not equal, the comparison fails.
4 Compare the Dst Node Adrs number to the destination node number in the packet. If they
are not equal, the comparison fails.
5 If the Src Socket Cmp parameter is not set to None, compare the Src Socket # to the source
socket number of the packet. If they do not match as specified by the Src Socket Cmp
parameter, the comparison fails.