Director
1.Enter filter running to view the currently active filters in the CAM.
Net Optics> filter running
Filter #1
src_mac=00:00:00:00:00:00 dst_mac=00:00:00:00:00:00 src_ip=0.0.0.0/255.255.255.255,dst_ip=0.0.0.0/255.255.255.255,ip_proto=0017 l4_src_port=0000,l4_dst_port=0000,vlan=0000,action=drop
in_ports=
Filter #2
src_mac=00:00:00:00:00:00 dst_mac=00:00:00:00:00:00 src_ip=0.0.0.0/255.255.255.255,dst_ip=0.0.0.0/255.255.255.255,ip_proto=0000 l4_src_port=0000,l4_dst_port=0000,vlan=0000,action=redir
in_ports=n1.1 redir_ports=m.1
IPv4 filter resource utilization: 2%
Net Optics>
Figure 40: Filter running command
2.Enter filter sync. The contents of the CAM are copied to the pending filter list.
|
| Pending filter list |
|
| CAM |
|
|
|
|
|
|
|
|
| Address | Filter |
| Address | Filter |
|
|
|
|
|
|
|
|
| 1 | n1.1 ip_proto=UDP action=drop |
| 1 | n1.1 ip_proto=UDP action=drop |
|
|
|
|
|
|
|
|
| 2 | n1.1 m.1 |
| 2 | n1.1 m.1 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Figure 41: After filter sync
3.Use filter add, filter ins, and filter del commands to change filters as desired.
|
| Pending filter list |
|
| CAM | |
|
|
|
|
|
|
|
| Address | Filter |
| Address | Filter |
|
|
|
|
|
|
|
|
| 1 | n1.1 ip_proto=TCP action=drop |
| 1 | n1.1 ip_proto=UDP action=drop |
|
|
|
|
|
|
|
|
| 2 | n1.1 m.1 |
| 2 | n1.1 m.1 |
|
|
|
|
|
|
|
|
| 3 | n1.2 m.2 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Figure 42: Filter 1 has been changed and filter 3 has been added
37
