10-8
Stinger®
IP2000 Configuration Guide
Filter Configuration
Defining route filters
admin> set input-filters 1 ip-filter source-port = 50
admin> set input-filters 2 valid-entry = yes
admin> set input-filters 2 forward = yes
admin> set input-filters 2 Type = generic-filter
admin> set output-filters 1 valid-entry = yes
admin> set output-filters 1 forward = yes
admin> set output-filters 1 Type = ip-filter
admin> set output-filters 1 ip-filter protocol = 17
admin> set output-filters 1 ip-filter Src-Port-Cmp = less
admin> set output-filters 1 ip-filter source-port = 50
admin> write -f
Defining route filters
Route filters are applied to RIP update packets to exclude routes from the local
system’s routing table, or to include routes in the table only after modifying their
metrics. For route filters, the forwarding action in the filter has no effect.
In a
filter
profile, the
route-filter
subprofile contains the following parameters.
The parameters are shown with their default values for input filters. The same values
apply for output filter specifications.
[in FILTER:input-filters[n]]
type = route-filter
[in FILTER:input-filters[n]:route-filter]
source-address-mask = 0.0.0.0
source-address = 0.0.0.0
route-mask = 0.0.0.0
route-address = 0.0.0.0
add-metric = 0
action = none
If you set the parameters in an input filter, only inbound packets are examined. If
you set them in an output filter, only outbound packets are examined.
Parameter
Setting
type
Type of filter. Use the default value
route-filter
for a
route filter. Only the parameters in the corresponding
subprofile are applicable.
source-address-mask
Mask to be applied to the
source-address
value before
comparing that value to the source address of a RIP
update packet.
source-address
IP address. After applying the
source-address-mask
value, the system compares the result to the source
address in a RIP packet.
route-mask
Mask to be applied to the destination address of a route.
