Alcatel-Lucent 7450 ESS Series, Configuration Manual, Page: 374 / 540

Page 374 7450 ESS OS Router Configuration Guide
Basic Configuration
The most basic IP and MAC filter policies must have the following:
• A filter ID
• Template scope, either exclusive or template
• Default action, either drop or forward
• At least one filter entry

Specified action, either drop or forward

Specified matching criteria
The following example displays a sample configuration of an IP filter policy. The configuration
blocks all incoming TCP session except Telnet and allows all outgoing TCP sessions from IP net
10.67.132.0/24.
Figure 22 depicts the interface to apply the filter.
A:ALA-1>config>filter# info
----------------------------------------------
ip-filter 3 create
entry 10 create
match protocol 6
dst-port eq 23
src-ip 10.67.132.0/24
exit
action forward
exit
entry 20 create
match protocol 6
tcp-syn true
tcp-ack false
exit
action drop
exit
exit
----------------------------------------------
A:ALA-1>config>filter#
Figure 22: Applying an IP Filter to an Ingress Interface
ALA-1
Ingress
Filter
TCP Connection
OSRG007