Director

 

 

 

 

 

 

 

 

Command

Sub-Command

Parameters

Example and description

 

 

 

 

filter

add

ipv6=< y n >

filter add ipv6=n in_ports=n1.1-n1.3 ip_

 

 

 

in_ports=<network_portlist>*

src=10.1.1.1 action=drop

 

 

 

<qual>=<value>

Parameters:

 

 

 

action=< redir drop >

ipv6=y for IPv6 addressing; ipv6=n for IPv4 ad-

 

 

 

redir_ports=<monitor_portlist>

dressing (defaults to IPv4 if parameter is omitted)

 

 

 

 

<network_portlist> — traffic from the network

 

 

 

Notes:

ports specified in this portlist is aggregated before

 

 

 

The command may include

being sent to the filter

 

 

 

<qual> and <value> are filter qualifiers and values

 

 

 

any number of <qual>, up

 

 

 

as listed in the table that follows this table

 

 

 

to the limit of Director's filter

 

 

 

Specify redir or drop as the filter action —

 

 

 

resources (approximately

 

 

 

if redir, packets matching all of the <qual> are

 

 

 

1,000 <qual> per chassis)

 

 

 

copied to all of the Monitor ports specified in the

 

 

 

The action=< redir drop >

 

 

 

portlist <monitor_portlist>

 

 

 

parameter is required

 

 

 

if drop, packets matching all of the <qual> are

 

 

 

 

 

 

 

If action=redir, then

dropped

 

 

 

redir_ports=<monitor_portlist>

Defines a filter, including the Network and Monitor

 

 

 

parameter is required

ports involved in the filter; filter is pending (inactive)

 

 

 

 

until activated by a filter commit or commit command

 

 

 

 

Note: If the filter command does not include any

 

 

 

 

<qual>, it defines aggregation, regeneration, and

 

 

 

 

matrix switching functions without filtering

 

 

 

 

 

 

 

clear

 

filter clear

 

 

 

 

Clears all active filters

 

 

 

 

 

 

 

commit

 

filter commit

 

 

 

 

Activates pending filters previously defined using

 

 

 

 

filter add and filter ins commands

 

 

 

 

 

 

 

del

ipv6=< y n >

filter del id=3

 

 

 

id=<id>*

Parameters:

 

 

 

 

ipv6=y for IPv6 addressing; ipv6=n for IPv4 ad-

 

 

 

 

dressing (defaults to IPv4 if parameter is omitted)

 

 

 

 

<id> is a decimal number from 1 to 999 that

 

 

 

 

identifies which filter is to be deleted

 

 

 

 

Deletes a pending filter

 

 

 

 

 

 

 

discard

 

filter discard

 

 

 

 

Clears all pending filters

 

 

 

 

 

 

 

ins

ipv6=< y n >

filter ins id=myfilter-1 in_ports=n1.1-n1.3 ip_

 

 

 

id=<id>*

src=10.1.1.1 action=drop

 

 

 

in_ports=<network_portlist>

Parameters:

 

 

 

<qual>=<value>

ipv6=y for IPv6 addressing; ipv6=n for IPv4 ad-

 

 

 

action=< redir drop >

dressing (defaults to IPv4 if parameter is omitted)

 

 

 

redir_ports=<monitor_portlist>

<id> is a decimal number from 1 to 999 that

 

 

 

 

specifies the priority of this filter (the address for

 

 

 

 

the filter in the filter CAM)

 

 

 

 

The rest of the filters parameters are as defined

 

 

 

 

for the filter add command

 

 

 

 

Defines and prioritizes a filter

 

 

 

 

 

 

43

*** Confidential - DO NOT Distribute ***

Page 47
Image 47
Net Optics none Filter add ipv6=n inports=n1.1-n1.3 ip, Src=10.1.1.1 action=drop, Command may include, Qual per chassis