Net Optics Smart Filtering none - Manual (Page 47)

43
*** Confidential - DO NOT Distribute ***
Director
Command Sub-Command Parameters Example and description
filter add ipv6=< y | n >
in_ports=<network_portlist>*
<qual>=<value>
action=< redir | drop >
redir_ports=<monitor_portlist>
Notes:
The command may include
any number of <qual>, up
to the limit of Director's filter
resources (approximately
1,000 <qual> per chassis)
The action=< redir | drop >
parameter is required
If action=redir, then
redir_ports=<monitor_portlist>
parameter is required
filter add ipv6=n in_ports=n1.1-n1.3 ip_
src=10.1.1.1 action=drop
Parameters:
ipv6=y for IPv6 addressing; ipv6=n for IPv4 ad-
dressing (defaults to IPv4 if parameter is omitted)
<network_portlist> — traffic from the network
ports specified in this portlist is aggregated before
being sent to the filter
<qual> and <value> are filter qualifiers and values
as listed in the table that follows this table
Specify redir or drop as the filter action —
if redir, packets matching all of the <qual> are
copied to all of the Monitor ports specified in the
portlist <monitor_portlist>
if drop, packets matching all of the <qual> are
dropped
Defines a filter, including the Network and Monitor
ports involved in the filter; filter is pending (inactive)
until activated by a filter commit or commit command
Note: If the filter command does not include any
<qual>, it defines aggregation, regeneration, and
matrix switching functions without filtering
clear filter clear
Clears all active filters
commit filter commit
Activates pending filters previously defined using
filter add and filter ins commands
del ipv6=< y | n >
id=<id>* filter del id=3
Parameters:
ipv6=y for IPv6 addressing; ipv6=n for IPv4 ad-
dressing (defaults to IPv4 if parameter is omitted)
<id> is a decimal number from 1 to 999 that
identifies which filter is to be deleted
Deletes a pending filter
discard filter discard
Clears all pending filters
ins ipv6=< y | n >
id=<id>*
in_ports=<network_portlist>
<qual>=<value>
action=< redir | drop >
redir_ports=<monitor_portlist> filter ins id=myfilter-1 in_ports=n1.1-n1.3 ip_
src=10.1.1.1 action=drop
Parameters:
ipv6=y for IPv6 addressing; ipv6=n for IPv4 ad-
dressing (defaults to IPv4 if parameter is omitted)
<id> is a decimal number from 1 to 999 that
specifies the priority of this filter (the address for
the filter in the filter CAM)
The rest of the filters parameters are as defined
for the filter add command
Defines and prioritizes a filter