Alcatel-Lucent 7750 SR-OS, Configuration Manual

Page: 457 / 674

Filter Policies
7750 SR OS Router Configuration Guide Page 457
Applying (IPv4/v6) Filter Policies to a Network Port
IP filter policies can be applied to network IP (v4/v6)interfaces. MAC filters cannot be applied to
network IP interfaces or to routable IES services. Similarly to applying filter policies to service, IP
(v4/v6) filter policies are applied to network interfaces by associating a policy with ingress and/or
egress direction as desired. Filter ID is used to associate an existing filter policy, or if defined, a
Filter Name for that Filter ID policy can be used in the CLI.
The following displays an IP filter applied to an interface at ingress.
A:ALA-48>config>router# info
#------------------------------------------
# IP Configuration
#------------------------------------------
...
interface "to-104"
address 10.0.0.103/24
port 1/1/1
ingress
filter ip 10
exit
egress
filter ip “default network egress policy”
exit
exit
...
#------------------------------------------
A:ALA-48>config>router#
The following displays IPv4 and IPv6 filters applied to an interface at ingress and egress.
A:config>router>if# info
----------------------------------------------
port 1/1/1
ipv6
address 3FFE::101:101/120
exit
ingress
filter ip 2
filter ipv6 1
exit
egress
filter ip 2
filter ipv6 1
exit
----------------------------------------------
A:config>router>if#