Manuals / 3Com / Computer Equipment / Network Router

3Com 812 manual Applying a Filter to an

Models: 812

1 144

Download 144 pages 39.75 Kb

Page 75

	Applying Filters Using CLI 6-37
	Do not apply a filter to more than one interface or VC / remote site profile. Also,
	do not apply an input and an output filter to more than one Ethernet interface.
Applying a Filter to an	To configure an input or output filter on an interface, use the following CLI
Interface Using CLI	commands:
	set interface <interface name> input_filter <filter name>
	set interface <interface name> output_filter <filter name>
	Interface name is eth:1 for the Ethernet interface and atm:1 for the ATM
	interface. For example, to apply an input filter to the ethernet interface: set
	interface eth:1 input_filter filter.fil
	When assigning the filter to the Ethernet interface, you must turn off filter access
	by entering the CLI command set interface eth:1 filter_access off.

Configuring a Filter for a VC/Remote Site Using

CLI

For more information about the filter access, refer to the Setting Filter Access section below.

Do not apply a filter to more than one interface or VC / remote site profile. Also, do not apply an input and an output filter to more than one Ethernet interface.

Do not apply a filter to more than one interface or VC/remote site profile.

To configure an input or output filter for a specific user, use the CLI commands:

set vc <vc or remote site name>input_filter <filter_name>

set vc <vc or remote site name>output_filter <filter_name>

For example, to apply an output filter to a user: set vc corpoffice input_filter filter.fil

Setting Filter Access When filters are assigned to both the WAN interface and a VC/remote site profile, Using CLI you need to tell the router which one to use using the filter access parameter. If

filter access is ON, the VC / remote site filters will override interface filters. If filter access is OFF, then the interface filters are used.

Always turn filter access OFF for the Ethernet interface since there are no profiles associated with it. If you do not turn if off, the filter will not be applied.

To set the filter access parameter to ON for a specific interface, use the CLI command

set interface <interface_name> filter_access ON

To set the filter access parameter to OFF for a specific interface, use the CLI command

set interface <interface_name> filter_access OFF

Image 75

3Com 812 manual Applying a Filter to an

Contents

Release OfficeConnectTM Remote Adsl Router CLI User’s GuideSanta Clara, California Contents Quick VC Setup Dhcp IPX Source and Destination Network Filtering Using CLI Officeconnect Remote 812 Sample Configuration Delete B-10 Dial Hangup Resolve Paused CommandsInput Counters Show interface interfacename settings Show ip counters TCP Settings Input CountersVerify Page Page Macintosh Computers IBM-PC Compatible ComputersUNIX-Based Computers From Windows 95, you can go to the DOS Window and runTelnet ipaddress Add ip network is the command ParametersValues Names or Strings Network Address FormatsStand for ip, iprouting, or ipsourcevalidation Conventions 4CHAPTER 2 CLI Command Conventions and Terminology Configuration Methods Manual Setup Instructions CLI Quick Setup Script Quick SetupQuick Setup Management Information Password ProtectionWhich portions of the network do you want to configure? Quick Setup Identification informationThis completes the section on Snmp management configuration Quick Setup IP informationTelnet information Quick Setup IPX information IP setup is completedQuick Setup Bridge Information This section contains a sample of possible settingsSample Identification Information IP Mask Management InformationTelnet Management IP InformationSample Output Display as Quick Setup Executes 8CHAPTER 4 Quick Setup Starting QuickVC Setup OCR-DSL quickvc CLI QuickVC Setup ScriptNetwork Service PPP RFC1483 IP configuration for VC name is now completeReview IPX Routing Network Service PPPIPX Routing Network Service RFC BridgingSample Output Display 6CHAPTER 5 Quick VC Setup IPX Routing Bridging System Administration Configuration OverviewShow vc default Remote Site ManagementList vcs Service Information Disable vc InternetSet vc Internet sendpassword testpassword Enable vc InternetIP Routing To configure the profile for VBRTo configure the profile for CBR Set vc vc name atm categoryofservice constant pcr cell rateDisable ip RIP Enable ip forwardingDisable ip forwarding Enable ip RIPDelete ip network network name Show ip settings Show ip routing settingsDefaultrouteoption Disable Enable Remoteipaddress ip address/maskAddressselection negotiate Metric metric Ipsourcevalidation Disable EnableTranslation AddressPrivateport port Set vc vc name natdefaultaddress ip addressMode 12CHAPTER 6 Manual Setup Monitoring the Dhcp Set dhcp mode relayMaxhops count enabled YES no Show dhcp server counters List dhcp server leasesSet dns cachesize size Numberretries number timeout seconds Enable dnsDisable dns Show dns settingsDelete dns server domain name Disable ipx network network nameIPX Routing List dns serversYou can delete a disabled network using the command Delete ipx network network nameIpxaddress Ffffffff Node server node address To add a Static IPX route over the LAN, use the commandSet ipx network network name Ipxnet server network address name service nameBridging Configure bridging for the remote site connectionShow bridge settings To see the current IP Forwarding status use the commandShow ip settings To disable IP Forwarding use the commandSet bridge agingtime seconds Simultaneous Bridging Routing Set time AdministrationSystem Show dateDelete user name Add user name password passwordSet system name name location location contact contact List usersSet command loginrequired yes Set command loginrequired no Set command idletimeout timeoutExit cli Capabilities Local or remote users can accessUse of a forged IP source address to circumvent a firewall Discards itIPX-RIP IPXIP-RIP IPX-SAPLine #filter Generic FiltersRouter CLI User’s Guide Filter File ComponentsBR-ETH Protocol RulesAccept src-addr=xxx Accept dst-addr=yyy Deny IPX IP Source and Destination Network Filtering Using CLIIP Source and Destination Port Filtering Using CLI IP Protocol Filtering Using CLIIP RIP Packet Filtering Using CLI IPX Source and Destination Network Filtering Using CLI IPX Source and Destination Host Filtering Using CLIIPX RIP Packet Filtering Using CLI Creating Filter Files IPX SAP Packet Filtering Using CLIBridge / Generic Filtering Using CLI Using CLIIP 1 Accept src-addr = Accept dst-addr = Deny Unit’s CLI commands to useApplying a Filter to an VC/Remote Site Profile Filter List Using CLIRemoving a Filter from an Interface Using CLI Adding Filters toIPX-RIP IPX-SAP 40CHAPTER 6 Manual Setup Officeconnect Remote 812 Sample Configuration Set dhcp mode server 2APPENDIX a Officeconnect Remote 812 Sample ConfigurationSet dhcp server start 192.168.200.1 end 192.168.200.40 mask Disable bridge spanningtree Add bridge network bridge 4APPENDIX a Officeconnect Remote 812 Sample Configuration Set vc Internet nat enableIPaddress CLI CommandsAdd bridge network Enabled yes Networkname Add dns hostAdd framedroute vc name Iproute ipaddress Metric number Add ip defaultroute Metric2APPENDIX B CLI Command Description Secondaryaddress ipaddress Vcname vcnameGateway gatewayaddr Metric hopcount Add ip network networknameAdd ipx service servicename Type servicetype4APPENDIX B CLI Command Description Name Hops number Below is a partial list of the IPX services availableIpxnet ipxaddress Metric hopcount Ticks ticknumber Adds an IPX route for the a user over the WAN6APPENDIX B CLI Command Description Http Data string Closeactiveconnections True FalseAdd snmp address IPaddress trapcommunity Name 8APPENDIX B CLI Command DescriptionParameters for all users Add user name Enabled yesDefault IpnameoraddrDelete Delete commands remove anything you previously added 10APPENDIX B CLI Command DescriptionArp output outputfilename ipnameoraddr Trapcommunity ServicenameDelete snmp Community nameDisable interface Disable bridge networkDisable bridge Disable icmpOutput outputfile Connections will be closed when the server is disabledDisable snmp Authentication trapsNetworks 14APPENDIX B CLI Command DescriptionHangup List 16APPENDIX B CLI Command DescriptionNormal Easyfilter.fil18APPENDIX B CLI Command Description Other List tcp connections Or list snmpTrapcommunities List syslogMore or CR Continue printing Quit More or CROutputfile exist IPhostname Set adsl resetSet command history numerical range Resolve nameYES no Sets console parameters for CLI commandsSet dhcp relay server2 Address IPaddress Enabled YES no Idle timout minutes Localprompt string Prompt stringSet dns cachesize number CLI Commands B-25 26APPENDIX B CLI Command Description Flashupdate D/NOFLASHUPDATE SENDDEFAULT/NOSENDDEFAULT DACCEPTDEFAULT/NOACCEPT Default DSets parameters for the specified IPX network 28APPENDIX B CLI Command DescriptionSet network service adminname Poolmembers numberSets parameters for dynamic IPX networks Transmitauthenticationname name OptionsSet system Name name Location location Modifies user parameters Set time timeSpecifies parameters for VCs 32APPENDIX B CLI Command DescriptionMTU ENABLED, DisabledShow Show commands display details about system entities 34APPENDIX B CLI Command DescriptionSets ATM parameters for VCs Operational Mode either loss of signal or operational Displays the current status of the ADSL/ATM linkFields 36APPENDIX B CLI Command Description Adsl Alcatel chipset firmware release versionShow bridge network name History Depth Current Prompt OCR-DSL Local Prompt OCR-DSL Settings 38APPENDIX B CLI Command DescriptionCounters Problems with Name Server internal server error Format Errors server said invalid request formatInput Counters 40APPENDIX B CLI Command DescriptionShow ip counters Displays system wide IP network statistics Counters Input Counters42APPENDIX B CLI Command Description Total Packets Received sum of IPX packets received Show ipx counters Show ipx network networkname counters44APPENDIX B CLI Command Description Show ipx ripDisplays information about RIP for IPX Dynamic Address Pool Begin starting IPX address Vcname settingsShow ipx sap Displays information about SAP for IPXOperational Status not opened or opened Name settings46APPENDIX B CLI Command Description Name countersRemote PPP entity. Default Enabled Settings for PPP Bundle 1 Compression48APPENDIX B CLI Command Description Entity, PAP is the defaultSystem Descriptor for example System Contact modify using set systemSystem Name modify using set system System Location modify using set systemTotal Output Datagrams sum of UDP datagrams sent 50APPENDIX B CLI Command DescriptionPressing control CommandsHelp Lists the available commands Telnet ipnameoraddr Telnet ipnameoraddr TCPport numberStatus Recall the next command in the history listCLI Exit Setescape stringComments 54APPENDIX B CLI Command Description ATM PAT AdslOverview Proxy Statistics Show dns counters Ping DNSLAN RIPTftp Routing SAPRIP SAP Telnet PPPWAN CLIWAN PPP Delete snmp trapcommunity B-113Com Corporation Limited Warranty FCC Class B Statement