USER’S GUIDE

VERIFYING IP FILTERS

To verify that IP Filters are functioning, perform the following test:

1.Configure and apply at least one IP filter that contains at least one condition whose action is to DISCARD the matching packet.

2.Perform a trace on discarded packets. On the administration console issue the command:

ip filter trace discard <return>

3.Attempt to transfer data that would be affected by the configured filters. Be sure to include packets which should be discarded by the configured filters.

4.Check the report log for discarded packets. Issue the administrative console command:

dr <return>

If IP Filters are discarding packets, the report log will display [IPFILT] messages similar to the following:

9A00:

[IPFILT] UDP/1

at Intf.

lan/Out

 

9A00:

{IP} Src: 128.131.0.1

Dst: 128.131.0.7

Pr:17

9A00

{UDP} Src:5001

Dst:69

 

 

If no packets have been discarded, refer to IP Filters in the Problem Diagnosis chapter.

5.When test completed, turn off the trace. Issue the administrative console command: ip filter trace off <return>

VERIFYING IP RIP

The following sections provide a method of verifying that IP RIP is initialized, and that it is processing properly on LAN and WAN interfaces.

VERIFYING IP RIP IS INITIALIZED

Follow the steps below to verify that IP RIP processing is initialized.

1.Determine if IP RIP processing has been initialized by viewing the system messages. On the administration console type:

dr <return>

2.The dr command displays the current system messages. Look for the following IP RIP message among the system message:

[IP RIP] RIP Protocol Initialization successful

If you see this IP RIP initialization message, the IP RIP has initialized successfully.

If this IP RIP initialization message is NOT displayed, refer to IP RIP Initialization in the Problem Diagnosis chapter.

366 CyberSWITCH

Page 366
Image 366
Cabletron Systems CSX1000, CSX1200 manual Verifying IP Filters, Verifying IP RIP, Ip filter trace discard return