Hitachi Gigabit Router GR2000 Series Enhanced Version Configuration Commands, Vol. 2
1-26
GR2K-GA-0014
Ver. 07-02
1.1.5
flow filter (IPv4)
Input Form
Setting and changing the global information by each input/output interface.
[set] flow filter <Interface Name> {in | out} [-disable]
Setting and changing the flow information.
[set] flow filter <Interface Name> {in | out} [-disable] list <List No.>
[Flow detecting condition]
[-action
[{ -forward | -drop | -policy <Interface Name> <IP Address>
| -policy_group <policy-Group-Name> |
-replace_dscp <DSCP_Value> | -index <No.> }]]
[Flow detecting condition]
1. When all high order protocol is target.
ip <IP_Source> <IP_Destination> [{dscp <DSCP_Value> | precedence
<precedence_Value>}]
[{upper| lower} <Length>] [vlan <VLAN ID>]
2. When the high order protocol is other than TCP, UDP, ICMP and IGMP.
<protocol No.> <IP_Source> <IP_Destination> [{dscp <DSCP_Value> |
precedence <precedence_Value>}]
[{upper| lower} <Length>]
3. When the high order protocol is TCP.
tcp <IP_Source> [<Port_Source>] <IP_Destination> [<Port_Destination>]
[ack] [syn] [{dscp <DSCP_Value> | precedence <precedence_Value>}]
[{upper| lower} <Length>]
4. When the high order protocol is UDP.
udp <IP_Source> [<Port_Source>] <IP_Destination> [<Port_Destination>]
[{dscp <DSCP_Value> | precedence <precedence_Value>}] [{upper| lower}
<Length>]
5. When the high order protocol is ICMP.
icmp <IP_Source> <IP_Destination> [<ICMP_Type> [<ICMP_Code>]] [{dscp
<DSCP_Value> | precedence <precedence_Value>}]
[{upper| lower} <Length>]
6. When the high order protocol is IGMP.
igmp <IP_Source> <IP_Destination> [<IGMP_Type>] [{dscp <DSCP_Value> |
precedence <precedence_Value>}]
[{upper| lower} <Length>]
Note 1: Enter the operation designation after [flow detection conditions] when
setting or changing both [flow detection conditions] and the operation
designation below parameter action simultaneously.
Note 2: If the parameters in the "flow detecting condition" and the operation
designation are to be changed, input all the setting contents again.
Changing only the operation designation.
[set] flow filter <Interface Name> {in | out} list <List No.> -action
[{ -forward | -drop | -policy <Interface Name> <IP Address>
| -policy_group <policy-Group-Name> | -replace_dscp <DSCP_Value>
| -index <No.> }]