15-8 MAX 6000/3000 Network Configuration Guide
Defining Static Filters
Defining generic filters
Settings in a RADIUS profile
In a RADIUS profile, you define a generic filter by assigning a value to the Ascend-Call Filter
or Ascend-Data Filter attribute, using the following format:
generic dir action offset mask value compare [more]
More Enable/disable application of the next filter before determining
whether the packet matches the specification. If More is set to Yes,
the current specification is linked to the one immediately
following it, so the filter can examine multiple noncontiguous
bytes within a packet before the forwarding decision is made. The
match occurs only if both specifications are matched. (The
subsequent specification must be enabled, or the MAX unit
ignores the filter specification in which More is set to Yes.
Parameter Specifies
Keyword or argument Value
generic Type of filter. Valid filter types for the Ascend-Data Filter and
Ascend-Call Filter attributes are Generic Filter (the default) and IP
Filter.
dir Specifies direction of the packets. You can specify in (to filter
packets coming in to the MAX unit or out (to filter packets going
out of the MAX unit).
action Defines the action that the MAX unit takes with a packet that
matches the filter. You can specify either forward or drop.
offset Byte-offset in a packet at which to start comparing packet contents
to the value specified in the filter. For details, see “Specifying
the offset to the bytes to be examined” on page 15-9.
mask A binary mask. The system applies the mask to the specified
value before comparing it to the bytes specified by offset. For
details, see “Masking the value before comparison” on
page 15-10.
value A hexadecimal number to compare to the packet contents at the
specified offset. The length of the number must be the same as the
length of the mask (up to 12 bytes).
compare A comparison operator that determines how the MAX unit
compares packet contents to the filter value. You can specify =
(Equal) or != (Not Equal). Equal is the default.
more If the more flag is present, the MAX unit applies the next filter
specification in the profile to the current packet before deciding
whether to forward or drop the packet. The direction and
forwarding action of the next filter must be the same as the current
filter, or the MAX unit ignores this flag.