Applying a Filter to an | 3Com 812 manual

	Applying Filters Using CLI 6-37
	Do not apply a filter to more than one interface or VC / remote site profile. Also,
	do not apply an input and an output filter to more than one Ethernet interface.
Applying a Filter to an	To configure an input or output filter on an interface, use the following CLI
Interface Using CLI	commands:
	set interface <interface name> input_filter <filter name>
	set interface <interface name> output_filter <filter name>
	Interface name is eth:1 for the Ethernet interface and atm:1 for the ATM
	interface. For example, to apply an input filter to the ethernet interface: set
	interface eth:1 input_filter filter.fil
	When assigning the filter to the Ethernet interface, you must turn off filter access
	by entering the CLI command set interface eth:1 filter_access off.

Configuring a Filter for a VC/Remote Site Using

CLI

For more information about the filter access, refer to the Setting Filter Access section below.

Do not apply a filter to more than one interface or VC / remote site profile. Also, do not apply an input and an output filter to more than one Ethernet interface.

Do not apply a filter to more than one interface or VC/remote site profile.

To configure an input or output filter for a specific user, use the CLI commands:

set vc <vc or remote site name>input_filter <filter_name>

set vc <vc or remote site name>output_filter <filter_name>

For example, to apply an output filter to a user: set vc corpoffice input_filter filter.fil

Setting Filter Access When filters are assigned to both the WAN interface and a VC/remote site profile, Using CLI you need to tell the router which one to use using the filter access parameter. If

filter access is ON, the VC / remote site filters will override interface filters. If filter access is OFF, then the interface filters are used.

Always turn filter access OFF for the Ethernet interface since there are no profiles associated with it. If you do not turn if off, the filter will not be applied.

To set the filter access parameter to ON for a specific interface, use the CLI command

set interface <interface_name> filter_access ON

To set the filter access parameter to OFF for a specific interface, use the CLI command

set interface <interface_name> filter_access OFF

Image 75

3Com 812 manual Applying a Filter to an

Contents

Release OfficeConnectTM Remote Adsl Router CLI User’s Guide Santa Clara, California Contents Quick VC Setup Dhcp IPX Source and Destination Network Filtering Using CLI Officeconnect Remote 812 Sample Configuration Delete B-10 Dial Hangup Resolve Paused Commands Input Counters Show interface interfacename settings Show ip counters TCP Settings Input CountersVerify Page Page Macintosh Computers IBM-PC Compatible Computers UNIX-Based Computers From Windows 95, you can go to the DOS Window and runTelnet ipaddress Add ip network is the command ParametersValues Names or Strings Network Address FormatsStand for ip, iprouting, or ipsourcevalidation Conventions 4CHAPTER 2 CLI Command Conventions and Terminology Configuration Methods Manual Setup Instructions CLI Quick Setup Script Quick Setup Quick Setup Management Information Password ProtectionWhich portions of the network do you want to configure? Quick Setup Identification information This completes the section on Snmp management configuration Quick Setup IP informationTelnet information Quick Setup IPX information IP setup is completed Quick Setup Bridge Information This section contains a sample of possible settingsSample Identification Information IP Mask Management InformationTelnet Management IP Information Sample Output Display as Quick Setup Executes 8CHAPTER 4 Quick Setup Starting QuickVC Setup OCR-DSL quickvc CLI QuickVC Setup Script Network Service PPP RFC1483 IP configuration for VC name is now complete Review IPX Routing Network Service PPPIPX Routing Network Service RFC Bridging Sample Output Display 6CHAPTER 5 Quick VC Setup IPX Routing Bridging System Administration Configuration Overview Show vc default Remote Site ManagementList vcs Service Information Disable vc InternetSet vc Internet sendpassword testpassword Enable vc Internet IP Routing To configure the profile for VBRTo configure the profile for CBR Set vc vc name atm categoryofservice constant pcr cell rate Disable ip RIP Enable ip forwardingDisable ip forwarding Enable ip RIP Delete ip network network name Show ip settings Show ip routing settings Defaultrouteoption Disable Enable Remoteipaddress ip address/maskAddressselection negotiate Metric metric Ipsourcevalidation Disable Enable Translation Address Privateport port Set vc vc name natdefaultaddress ip address Mode 12CHAPTER 6 Manual Setup Monitoring the Dhcp Set dhcp mode relayMaxhops count enabled YES no Show dhcp server counters List dhcp server leases Set dns cachesize size Numberretries number timeout seconds Enable dnsDisable dns Show dns settings Delete dns server domain name Disable ipx network network nameIPX Routing List dns servers You can delete a disabled network using the command Delete ipx network network nameIpxaddress Ffffffff Node server node address To add a Static IPX route over the LAN, use the command Set ipx network network name Ipxnet server network address name service name Bridging Configure bridging for the remote site connection Show bridge settings To see the current IP Forwarding status use the commandShow ip settings To disable IP Forwarding use the command Set bridge agingtime seconds Simultaneous Bridging Routing Set time AdministrationSystem Show date Delete user name Add user name password passwordSet system name name location location contact contact List users Set command loginrequired yes Set command loginrequired no Set command idletimeout timeoutExit cli Capabilities Local or remote users can accessUse of a forged IP source address to circumvent a firewall Discards it IPX-RIP IPXIP-RIP IPX-SAP Line #filter Generic FiltersRouter CLI User’s Guide Filter File Components BR-ETH Protocol Rules Accept src-addr=xxx Accept dst-addr=yyy Deny IPX IP Source and Destination Network Filtering Using CLI IP Source and Destination Port Filtering Using CLI IP Protocol Filtering Using CLIIP RIP Packet Filtering Using CLI IPX Source and Destination Network Filtering Using CLI IPX Source and Destination Host Filtering Using CLIIPX RIP Packet Filtering Using CLI Creating Filter Files IPX SAP Packet Filtering Using CLIBridge / Generic Filtering Using CLI Using CLI IP 1 Accept src-addr = Accept dst-addr = Deny Unit’s CLI commands to use Applying a Filter to an VC/Remote Site Profile Filter List Using CLIRemoving a Filter from an Interface Using CLI Adding Filters to IPX-RIP IPX-SAP 40CHAPTER 6 Manual Setup Officeconnect Remote 812 Sample Configuration Set dhcp mode server 2APPENDIX a Officeconnect Remote 812 Sample ConfigurationSet dhcp server start 192.168.200.1 end 192.168.200.40 mask Disable bridge spanningtree Add bridge network bridge 4APPENDIX a Officeconnect Remote 812 Sample Configuration Set vc Internet nat enable IPaddress CLI CommandsAdd bridge network Enabled yes Networkname Add dns host Add framedroute vc name Iproute ipaddress Metric number Add ip defaultroute Metric2APPENDIX B CLI Command Description Secondaryaddress ipaddress Vcname vcname Gateway gatewayaddr Metric hopcount Add ip network networkname Add ipx service servicename Type servicetype4APPENDIX B CLI Command Description Name Hops number Below is a partial list of the IPX services availableIpxnet ipxaddress Metric hopcount Ticks ticknumber Adds an IPX route for the a user over the WAN 6APPENDIX B CLI Command Description Http Data string Closeactiveconnections True False Add snmp address IPaddress trapcommunity Name 8APPENDIX B CLI Command Description Parameters for all users Add user name Enabled yesDefault Ipnameoraddr Delete Delete commands remove anything you previously added 10APPENDIX B CLI Command DescriptionArp output outputfilename ipnameoraddr Trapcommunity ServicenameDelete snmp Community name Disable interface Disable bridge networkDisable bridge Disable icmp Output outputfile Connections will be closed when the server is disabledDisable snmp Authentication traps Networks 14APPENDIX B CLI Command Description Hangup List 16APPENDIX B CLI Command Description Normal Easyfilter.fil 18APPENDIX B CLI Command Description Other List tcp connections Or list snmpTrapcommunities List syslog More or CR Continue printing Quit More or CROutputfile exist IPhostname Set adsl resetSet command history numerical range Resolve name YES no Sets console parameters for CLI commandsSet dhcp relay server2 Address IPaddress Enabled YES no Idle timout minutes Localprompt string Prompt string Set dns cachesize number CLI Commands B-25 26APPENDIX B CLI Command Description Flashupdate D/NOFLASHUPDATE SENDDEFAULT/NOSENDDEFAULT DACCEPTDEFAULT/NOACCEPT Default D Sets parameters for the specified IPX network 28APPENDIX B CLI Command Description Set network service adminname Poolmembers numberSets parameters for dynamic IPX networks Transmitauthenticationname name OptionsSet system Name name Location location Modifies user parameters Set time time Specifies parameters for VCs 32APPENDIX B CLI Command Description MTU ENABLED, Disabled Show Show commands display details about system entities 34APPENDIX B CLI Command DescriptionSets ATM parameters for VCs Operational Mode either loss of signal or operational Displays the current status of the ADSL/ATM linkFields 36APPENDIX B CLI Command Description Adsl Alcatel chipset firmware release versionShow bridge network name History Depth Current Prompt OCR-DSL Local Prompt OCR-DSL Settings 38APPENDIX B CLI Command DescriptionCounters Problems with Name Server internal server error Format Errors server said invalid request format Input Counters 40APPENDIX B CLI Command Description Show ip counters Displays system wide IP network statistics Counters Input Counters 42APPENDIX B CLI Command Description Total Packets Received sum of IPX packets received Show ipx counters Show ipx network networkname counters 44APPENDIX B CLI Command Description Show ipx ripDisplays information about RIP for IPX Dynamic Address Pool Begin starting IPX address Vcname settingsShow ipx sap Displays information about SAP for IPX Operational Status not opened or opened Name settings46APPENDIX B CLI Command Description Name counters Remote PPP entity. Default Enabled Settings for PPP Bundle 1 Compression 48APPENDIX B CLI Command Description Entity, PAP is the default System Descriptor for example System Contact modify using set systemSystem Name modify using set system System Location modify using set system Total Output Datagrams sum of UDP datagrams sent 50APPENDIX B CLI Command Description Pressing control CommandsHelp Lists the available commands Telnet ipnameoraddr Telnet ipnameoraddr TCPport number Status Recall the next command in the history listCLI Exit Setescape string Comments 54APPENDIX B CLI Command Description ATM PAT Adsl Overview Proxy Statistics Show dns counters Ping DNS LAN RIPTftp Routing SAPRIP SAP Telnet PPPWAN CLI WAN PPP Delete snmp trapcommunity B-11 3Com Corporation Limited Warranty FCC Class B Statement