Alcatel-Lucent 7750 SR OS User Manual

Page 313

Advertising
background image

Filter Policies

7750 SR OS Router Configuration Guide

Page 313

Configuring the HTTP-Redirect Option

If http-redirect is specified as an action, a corresponding forward entry must be specified before
the redirect. For example:

CLI Syntax:

config>filter# ip-filter filter-id

entry entry-id [time-range time-range-name]

action [drop]

action forward [next-hop {ip-address |indirect ip-address

|interface ip-int-name}]

action forward [redirect-policy policy-name]

action forward [sap sap-id|sdp sdp-id]

action http-redirect url

Note that http-redirect is not supported on 7750 SR-1 or 7450 ESS-1 models.

The following displays the configuration command usage to configure http-redirect:

Example:config>filter>ip-filter# entry 20 create
config>filter>ip-filter>entry$ match protocol tcp

config>filter>ip-filter>entry>match$ dst-ip 100.0.0.2/32

config>filter>ip-filter>entry>match$ dst-port eq 80

config>filter>ip-filter>entry>match$ exit

config>filter>ip-filter# entry 30 create

config>filter>ip-filter>entry# match protocol tcp

config>filter>ip-filter>entry>match# dst-port eq 80

config>filter>ip-filter>entry>match# exit

config>filter>ip-filter>entry# action http-redirect

"http://100.0.0.2/login.cgi?mac=$MAC$sap=

$SAP&ip=$IP&orig_url=$URL"

config>filter>ip-filter>entry# exit

The following example displays the http-redirect configuration:

A:ALA-48>config>filter>ip-filter# info

----------------------------------------------

description "filter-main"

scope exclusive

entry 10 create

description "no-91"

match

dst-ip 10.10.10.91/24

src-ip 10.10.0.100/24

exit

no action

exit

entry 20 create

match protocol tcp

dst-ip 100.0.0.2/32

dst-port eq 80

exit

action forward

Advertising