Managing Filters
4-7
Interface name is
eth:1
for the Ethernet interface and
atm:1
for the ATM
interface. For example, to apply an input filter to the ethernet interface:
set interface eth:1 input_filter filter.flt
When assigning the filter to the Ethernet interface, you must turn off filter access
by entering the CLI command
set interface eth:1 filter_access off.
For more information about the filter access, refer to the
Setting Filter Access
section below.
Configuring a Filter for a
Port
■
To configure an input or output filter for a specific user, use the CLI
commands:
set port <port number>input_filter <filter_name>
set port <port number>output_filter <filter_name>
■
For example, to apply an output filter to port 2:
set port 2 output_filter filter.flt
Setting Filter Access
When filters are assigned to both the WAN interface and a port profile, you need
to tell the bridge which one to use using the filter access parameter. If filter access
is ON, the port filters will override interface filters. If filter access is OFF, then the
interface filters are used.
Always turn filter access OFF for the Ethernet interface since there are no profiles
associated with it. If you do not turn if off, the filter will not be applied.
■
To set the filter access parameter to ON for a specific interface, use the CLI
command:
set interface <interface_name> filter_access ON
■
To set the filter access parameter to OFF for a specific interface, use the CLI
command:
set interface <interface_name> filter_access OFF
Managing Filters
This section provides information about how to perform filter management tasks.
Displaying the Managed
Filter List
■
To display the list of managed filters, use the following command:
list filters <filter_name>
The resulting display might look like this:
Adding Filters to the
Managed List
The
add filter
command verifies filter syntax prior to adding the filter to the
managed list. If the syntax is valid, no message is generated and the command
prompt returns. If syntax errors exist, error messages are generated detailing the
cause of the errors.
Filter Name
Status
Protocols
filter.flt
NORMAL
BR-ETH