Net Optics Smart Filtering none User Manual

Page 47

*** Confidential - DO NOT Distribute ***

Director

Command Sub-Command Parameters

Example and description

filter

add

ipv6=< y | n >
in_ports=*
=
action=< redir | drop >
redir_ports=

Notes:
The command may include
any number of , up
to the limit of Director's filter
resources (approximately
1,000 per chassis)
The action=< redir | drop >
parameter is required
If action=redir, then
redir_ports=
parameter is required

filter add ipv6=n in_ports=n1.1-n1.3 ip_
src=10.1.1.1 action=drop

Parameters:

ipv6=y for IPv6 addressing; ipv6=n for IPv4 ad-
dressing (defaults to IPv4 if parameter is omitted)
— traffic from the network
ports specified in this portlist is aggregated before
being sent to the filter
and are filter qualifiers and values
as listed in the table that follows this table
Specify redir or drop as the filter action —
if redir, packets matching all of the are
copied to all of the Monitor ports specified in the
portlist
if drop, packets matching all of the are
dropped

Defines a filter, including the Network and Monitor
ports involved in the filter; filter is pending (inactive)
until activated by a filter commit or commit command
Note: If the filter command does not include any
, it defines aggregation, regeneration, and
matrix switching functions without filtering

clear

filter clear

Clears all active filters

commit

filter commit

Activates pending filters previously defined using
filter add and filter ins commands

del

ipv6=< y | n >
id=*

filter del id=3

Parameters:

ipv6=y for IPv6 addressing; ipv6=n for IPv4 ad-
dressing (defaults to IPv4 if parameter is omitted)
is a decimal number from 1 to 999 that
identifies which filter is to be deleted

Deletes a pending filter

discard

filter discard

Clears all pending filters

ins

ipv6=< y | n >
id=*
in_ports=
=
action=< redir | drop >
redir_ports=

filter ins id=myfilter-1 in_ports=n1.1-n1.3 ip_
src=10.1.1.1 action=drop

Parameters:

ipv6=y for IPv6 addressing; ipv6=n for IPv4 ad-
dressing (defaults to IPv4 if parameter is omitted)
is a decimal number from 1 to 999 that
specifies the priority of this filter (the address for
the filter in the filter CAM)
The rest of the filters parameters are as defined
for the filter add command

Defines and prioritizes a filter