Settings in a radius profile, Settings in a radius profile -8 – Lucent Technologies 6000 User Manual

Page 544

Advertising
background image

15-8

MAX 6000/3000 Network Configuration Guide

Defining Static Filters
Defining generic filters

Settings in a RADIUS profile

In a RADIUS profile, you define a generic filter by assigning a value to the Ascend-Call Filter
or Ascend-Data Filter attribute, using the following format:

generic dir action offset mask value compare [more]

More

Enable/disable application of the next filter before determining
whether the packet matches the specification. If More is set to Yes,
the current specification is linked to the one immediately
following it, so the filter can examine multiple noncontiguous
bytes within a packet before the forwarding decision is made. The
match occurs only if both specifications are matched. (The
subsequent specification must be enabled, or the MAX unit
ignores the filter specification in which More is set to Yes.

Parameter

Specifies

Keyword or argument

Value

generic

Type of filter. Valid filter types for the Ascend-Data Filter and
Ascend-Call Filter attributes are Generic Filter (the default) and IP
Filter.

dir

Specifies direction of the packets. You can specify in (to filter
packets coming in to the MAX unit or out (to filter packets going
out of the MAX unit).

action

Defines the action that the MAX unit takes with a packet that
matches the filter. You can specify either forward or drop.

offset

Byte-offset in a packet at which to start comparing packet contents
to the value specified in the filter. For details, see “Specifying
the offset to the bytes to be examined” on page 15-9.

mask

A binary mask. The system applies the mask to the specified
value

before comparing it to the bytes specified by offset. For

details, see “Masking the value before comparison” on
page 15-10.

value

A hexadecimal number to compare to the packet contents at the
specified offset. The length of the number must be the same as the
length of the mask (up to 12 bytes).

compare

A comparison operator that determines how the MAX unit
compares packet contents to the filter value. You can specify =
(Equal) or != (Not Equal). Equal is the default.

more

If the more flag is present, the MAX unit applies the next filter
specification in the profile to the current packet before deciding
whether to forward or drop the packet. The direction and
forwarding action of the next filter must be the same as the current
filter, or the MAX unit ignores this flag.

Advertising
This manual is related to the following products: