Carrier Access Axxius 800 Add router-lan filter custom, Rtrlan-addr, Pkt-offset, Mask, Match

CLI Commands

add

add (router-lan) filter custom

Use the add (router-lan) filter custom command to add a custom filter to the table of Layer 2 filters applied to the specified LAN interface.

Syntax: add {rtr_lan-addr} filter custom {pkt-offset} {mask} {match} {"filter-name"}

Example: add 2:1 filter custom 16 0xFFFF0000 0x45000000 "MyRule"

The example will add a custom layer-2 filter that will match all packets that contain the hex value 4500 at the 16th octet past the MAC header.

{rtr_lan-addr}

The Router address is in the form {slot:port} or {slot "profile-name"}.

slot	Slot number (1-8) that contains the Router card.
port	Port number of the Router.
"profile-name"	The profile name for the Router interface. Name must be enclosed
	in quotes, with a maximum length of 11 characters.

{pkt-offset}

This field will designate where within a packet (past the MAC header) the system is to begin looking for a matching character string. The offset value range is 0 to 60 bytes. To create a filter for the data in the MAC header, use the address and Protocol filters. See charts on the following page for Ethernet Frame and IP Packet formats.

Note: an offset of 12 will create a Source IP Address filter an offset of 16 will create a Destination IP Address filter

{mask}

The 32-bit mask to indicate which bits to compare to the match value starting at the offset position. The mask is entered as a 32-bit hexadecimal value (all Fs is exact match FFFFFFFF).

{match}

The 32-bit match value that is used to match the incoming packet. The match value is entered as a 32-bit hexadecimal value.

{"filter-name"}

A symbolic name given to identify a filter rule. This name must be enclosed in quotes, with a maximum of 8 characters.

Axxius 800 - Release 2.2 5-15