3Com OfficeConnect 3C100XF, Cli User'S Manual

Page: 220 / 260

27-10 C
HAPTER
27: P
ACKET
F
ILTERS
Adding Filters to the
Managed List
The add filter command verifies filter syntax prior to adding the filter to the
managed list. If the syntax is valid, no message is generated and the command
prompt returns. If syntax errors exist, error messages are generated detailing the
cause of the errors.
If the syntax is invalid, the filter is still added to the managed list with a status of
verify failed. To correct filter file errors, you must make the changes to the original
filter file using a text editor and re-TFTP the file to flash memory. You must then
use the
verify filter command to check the filter file syntax. For more information
about the verify filter command refer to the verify filter command write-up.
Use the add filter command to add a filter file to the list of managed filters.
It may be helpful to use the list filters command to see a list of filter files
successfully stored in flash memory.
Removing a Filter from
an Interface
set interface
<interface_name>
input_filter““
output_filter””
Use this command to remove a filter that is assigned to an interface.
The ““ value represents a null value and removes the defined filter from the
interface. For example, to remove an output filter from an interface named eth:1,
you would use this command:
set interface eth:1 output_filter ““
Deleting a Packet Filter
delete filter
<filter_name>
Use this command to remove a filter from the filter list.
delete file <file_name> Use this command to delete a filter file permanently from flash memory.
Verifying Filter File
Syntax
The verify filter command is useful if you make changes to a filter file that has
already been added to the managed list and re-TFTP the file back into FLASH
memory (using the same file name).
This command checks the filter file syntax, compiles it and if valid, generates no
message, returning you to the command prompt. If invalid the OfficeConnect
Gateway generates error messages.
Although filter file changes take effect on an interface immediately after you issue
the
set interface command, you must set interface after verification to apply the
new filter rules to that interface.
For example, to verify a filter file named no_spam.flt you would enter the
following:
verify filter no_spam.flt