3Com OfficeConnect Remote 812 manual Managing Filters, Filter List Using CLI, VPN Tunnel

Configuring Filters for a To configure filters for a VPN tunnel, use the following commands:

VPN Tunnel

set tunnel <tunnel name> input_filter <filter_name> set tunnel <tunnel name> output_filter <filter_name>

For more information about configuring a VPN Tunnel (including information about configuring filters), see Setting Up a Virtual Private Network (VPN) Tunnel, Creating a VPN Tunnel Using 812 Default Values, and Tunnel Commands.

Setting Filter Access When filters are assigned to both the WAN interface and a VC/remote site profile, Using CLI you need to tell the router which one to use using the filter access parameter. If

filter access is ON, the VC / remote site filters will override interface filters. If filter access is OFF, then the interface filters are used.

Always turn filter access OFF for the Ethernet interface since there are no profiles associated with it. If you do not turn if off, the filter will not be applied.

To set the filter access parameter to ON for a specific interface, use the CLI command

set interface <interface_name> filter_access ON

To set the filter access parameter to OFF for a specific interface, use the CLI command

set interface <interface_name> filter_access OFF

Managing Filters	This section provides information about how to perform filter management tasks.
Using CLI

Displaying the Managed To display the list of managed filters, use the following command:

Filter List Using CLI

list filters <filter_name>

The resulting display might look like this:

Filter Name	Status	Protocols
ip.fil	NORMAL	IP IP-RIP

Adding Filters to the The add filter command verifies filter syntax prior to adding the filter to the Managed List Using CLI managed list. If the syntax is valid, no message is generated and the command

prompt returns. If syntax errors exist, error messages are generated detailing the cause of the errors.

If the syntax is invalid, the filter is still added to the managed list with a status of verify failed. To correct filter file errors, you must make the changes to the original filter file using a text editor, and re-TFTP the file to the router’s FLASH memory.

Then use the verify filter command to check the filter file syntax.

To add a filter file to the list of managed filters, use the CLI command

add filter <filter name>