Enterasys Networks CSX7000, CSX5500, CSX6000 manual IP Filters, Ip filter trace discard return

USER’S GUIDE

	ISDN
CSX5500	CSX5500
"SITE1"	"SITE2"
100.0.0.1	192.1.0.2

1.Determine if SITE1 can access SITE2 over the WAN connection. On system A type: ip ping 192.1.0.2 <return>

2.Determine if system B can access system A over the WAN connection. On system B type: ip ping 100.0.0.1 <return>

3.If the systems CANNOT ping each other, try the following:

a.Have the remote router ping itself using its LAN IP address.

b.Have the CyberSWITCH ping itself using its LAN IP address.

c.Have the router ping the CyberSWITCH. If the ping is unsuccessful:

•and no call is up, check the static route on the router

•and a call is up, check the static route on the CyberSWITCH.

IP FILTERS

1.Configure and apply at least one IP filter that contains at least one condition whose action is to DISCARD the matching packet.

2.Perform a trace on discarded packets. On the administration console issue the command:

ip filter trace discard <return>

3.Attempt to transfer data that would be affected by the configured filters. Be sure to include packets which should be discarded by the configured filters.

4.Check the report log for discarded packets. Issue the administrative console command:

dr <return>

If IP Filters are discarding packets, the report log will display [IPFILT] messages similar to the following:

9A00:	[IPFILT] UDP/1	at Intf.	lan/Out
9A00:	{IP} Src: 128.131.0.1		Dst: 128.131.0.7	Pr:17
9A00	{UDP} Src:5001	Dst:69

440 CyberSWITCH