
BayRS Version 15.5.0.0 Document Change Notice
13-24 314470-15.5 Rev 00
For example, to process packets that match the filter criteria and ranges but do not
reset the inactivity timer, enter the following command:
actions/ip-outbound-filter/drop_telnet_s31/S31# no-reset on
actions/ip-outbound-filter/drop_telnet_s31/S31#
Specifying User-Defined Criteria
You can specify user-defined criteria in IP outbound traffic filters by specifying an
offset and length based on the reference fields in the IP header.
To specify user-defined criteria, navigate to the match prompt (for example,
box;
serial/3/1; protocol-priority; ip-outbound-filter <filter_name>); match-ip-ip)
and enter:
user-defined reference <value> offset <value> bitwidth <value> range <value>
reference
is a known bit position in the packet header. Valid values are
ip-wan-header-start, ip-wan-header-end, x25-mac-start, x25-snap-start,
x25-nlpid-start, x25-nlpdu-start.
offset specifies the first position of the filtered bit pattern in relation to the
reference point (measured in bits).
bitwidth specifies the total bit length that matches the packet criteria.
range specifies a minimum and maximum target value to apply to the match
criterion. For a single value, you must specify the minimum value in hexadecimal
format. You can precede the value with 0x.
Example
This example specifies user-defined criteria to create an IP traffic filter that drops
every packet that has a value of 192 at offset 96 from the beginning of the IP
header.
match-ip-ip/ip-outbound-filter/drop_telnet_s31/S31# user-defined
reference ip-wan-header-start offset 96
bitwidth 16 range 0192
user-defined/filter/drop_telnet_231/start-ip-header/96/16/0192#
back
match-ip-ip/ip-outbound-filter/drop_telnet_s31/S31# back
ip-outbound-filter/drop_telnet_231/S31# actions
actions/ip-outbound-filter/drop_telnet_s31/S31# action drop
Komentáře k této Příručce