Filter Policies
7750 SR OS Router Configuration Guide Page 369
Default no filter-sample
interface-disable-sample
Syntax [no] interface-disable-sample
Context config>filter>ip-filter>entry
Description Specifies that traffic matching the associated IP filter entry is not sampled if the IP interface is set to
cflowd interface mode.
If the cflowd is either not enabled or set to cflowd acl mode, this command is ignored.
The no form of this command enables sampling.
Default no interface-disable-sample
match
Syntax match [protocol protocol-id]
no match
Context config>filter>ip-filter>entry
Description This command enables the context to enter match criteria for the filter entry. When the match criteria
have been satisfied the action associated with the match criteria is executed.
If more than one match criteria (within one match statement) are configured then all criteria must be
satisfied (AND function) before the action associated with the match is executed.
A match context may consist of multiple match criteria, but multiple match statements cannot be
entered per entry.
The no form of the command removes the match criteria for the entry-id.
Parameters protocol — The protocol keyword configures an IP protocol to be used as an IP filter match
criterion. The protocol type such as TCP or UDP is identified by its respective protocol number.
protocol-id — Configures the decimal value representing the IP protocol to be used as an IP filter
match criterion. Well known protocol numbers include ICMP(1), TCP(6), UDP(17). The no form
the command removes the protocol from the match criteria.
Values 0 — 255 (values can be expressed in decimal, hexidecimal, or binary - DHB)
keywords: none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp, idrp, igmp,
igp, ip, ipv6, ipv6-frag, ipv6-icmp, ipv6-no-nxt, ipv6-opts, ipv6-route, isis, iso-ip,
l2tp, ospf-igp, pim, pnni, ptp, rdp, rsvp, stp, tcp, udp, vrrp
* — udp/tcp wildcard
Protocol Protocol ID Description
icmp 1 Internet Control Message