Net Optics none manual Understand pending and active filters

Page 40

Director

Understand pending and active filters

To understand the actions of filter commands such as filter commit, filter discard, and filter delete, it is helpful to visualize the pending filter list and the CAM that holds the active filters.

The previous section explained how the active filters are stored in a CAM, which can be thought of as list of active filters. These filters, which are actively running in the device, may be referred to as active, running, or committed. Pending filters, that is, filters that have been defined using filter add and filter ins commands but not yet committed, are kept in a pending filter list that shadows the CAM. These filters may be referred to as pending or uncommitted. The following table shows which filter commands affect the pending filter list and which affect the CAM.

Commands apply to

Pending filter list	CAM

filter add	commit
filter del	filter clear
filter discard	filter commit
filter ins	filter running
filter list
filter sync

As can be seen from the table, most of the time you work with the contents of the pending filter list. When you have the filters set up the way you want them in the pending filter list, a commit or filter commit command transfers the contents of the pending filter list to the CAM, activating that filter set-up.

A common workflow for changing the Director filter configuration might be as follows.

To change the Director filter configuration:

		Pending filter list			CAM

	Address	Filter		Address	Filter

				1	n1.1 ip_proto=UDP action=drop

				2	n1.1 m.1

Figure 39: Starting state

1.Enter filter running to view the currently active filters in the CAM.

Net Optics> filter running

001 ip_src=00000000/ffffffff,ip_dst=00000000/ffffffff,ip_proto=0017

l4_src_port=0000,l4_dst_port=0000,vlan=0000,action=1 in_ports=00

002 ip_src=00000000/ffffffff,ip_dst=00000000/ffffffff,ip_proto=0000

l4_src_port=0000,l4_dst_port=0000,vlan=0000,action=3 in_ports=00

redir_ports=12 Net Optics>

Figure 40: Filter running command

2.Enter filter sync. The contents of the CAM are copied to the pending filter list.

36

*** Confidential - DO NOT Distribute ***

Image 40

Contents Smart Filtering Appliance Trademarks and Copyrights Contents Appendix a Appendix BAppendix C Filter parametersChapter Introduction Key Features Ease of UseMonitor port Filtering Passive, Secure TechnologyAbout this Guide DescriptionDirector Architecture Director internal architectureUSB port Director ManagementTypical Application Network LinksMonitoring Tools In-line Monitoring of 10 Gigabit Links IBypass Switch MethodExternal Network Tap method Power LEDs Director Front PanelMonitor Port LEDs DNM / Network Port LEDsDirector Rear Panel XFPChapter Installing Director Plan the Installation Unpack and Inspect the Director deviceInstall SFP and XFP Monitor port Modules Install Director Network ModulesRack Mount the Director device Connect Power to Director Connect the local CLI InterfaceConnect the remote CLI Interface Baud Data bits No parity 1 stop bit No flow controlTip To connect the CLI for remote use over the Management portLog into the CLI To log into the CLIChange Director User Name and Password Configure Director using the CLITo change the user name and password To change the port mode Assign a New Manager IP AddressTo assign a new Manager IP address to Director Change Port ModesSave and Load Director Configurations Set the Current Date and TimeUsing the CLI Help Command To view CLI help informationUsing the CLI Command History Buffer Current config fileConnect Span Ports to Director To connect a Span portConnect Director With In-line Network Links To connect an in-line network linkCheck the Installation Configure a Matrix Switch connection in DirectorConnect Monitoring Tools to Director Chapter Configuring Filters Using the CLI SyntaxEnter filter commit. The switch connection is activated Copy Traffic From Any Network Port to Any Monitor PortRegenerate Traffic to Any Set of Monitor Ports Lter add inports=n1.1 action=redir redirports=m.3-m.5Create Filters To create a filter that selects IPv4 packets by protocolCreate Complex Filters Logical and filter connectionView filters UDPWork with configurable 10 Gigabit ports Configurable 10 Gigabit XFP ports used as Network portsNetwork Port 11 XFP Port Understand filter interactions CAMFlow diagram now looks as follows Exclusive filters N1.1 ipproto=UDP action=drop N1.1 m.1To change the Director filter configuration Understand pending and active filtersEnter filter list to view the pending filter list User interactions Filter capacityDaisy-chaining Multiple Director Chassis Appendix a Director Specifications Specifications, chassisSpecifications, DNM EnvironmentalCertifications Available ModelsAppendix B Command Line Interface Command Sub-Command Parameters Example and descriptionCommand may include Filter add and filter ins commandsFilter add ipv6=n inports=n1.1-n1.3 ip Src=10.1.1.1 action=dropLoad myconfiguration-1 Filter listFilter running Filter syncSave myconfiguration-1 Show myconfiguration-1Passwd PingSysip commit Sysip ipaddr=192.168.1.2 netmask=255.255.0.0Sysip show TimeThis This command is only available at root level Command User showUser add name=bob pw=bob-pw priv=3 Is onlyFilter parameters Director Filter Parameters Qual Value Example DescriptionAppendix C Protocol Numbers Num Keyword ProtocolMobile L2TP Limitations on Warranty and Liability By Net Optics, Inc. All Rights Reserved