Alcatel-Lucent 7750 SR-OS, Configuration Manual

Page: 429 / 674

Filter Policies
7750 SR OS Router Configuration Guide Page 429
Applying Filters
After filters are created, they can be applied to the following entities:
• Applying a Filter to a SAP on page 429
• Applying a Filter to a Network Port a Network IP on page 429
Applying a Filter to a SAP
During the SAP creation process, ingress and egress filters are selected from a list of qualifying IP
and MAC filters. When ingress filters are applied to a SAP, packets received at the SAP are
checked against the matching criteria in the filter entries. If the packet completely matches all
criteria in an entry, the checking stops and the entry’s action is preformed. If the packet does not
match any filter entries, the default filter action is applied.
When egress filters are applied to a SAP, packets received at the egress SAP are checked against
the matching criteria in the filter entries. If the packet completely matches all criteria in an entry,
the checking stops. If the packet does not match filter entries, the default filter action is applied.
Filters can be added or changed to an existing SAP configuration by modifying the SAP
parameters. Filter policies are not operational until they are applied to a SAP and the service is
enabled.
Applying a Filter to a Network Port a Network IP
An IP (v4 and/or IPv6) filter can be applied to a network port IP interface. Packets received on the
interface are checked against the matching criteria in the filter entries. If the packet completely
matches all criteria in an entry, the checking stops and the entry’s action is performed. If the
packets do not match any filter entries, they are discarded or forwarded based on the default action
specified in the policy.