NEXPEED NBG440 User’s Manual
NexComm Systems, Inc. 78 PAGE
Deleting a filter
To delete a filter condition, use the following command:
COMMAND
(conf)# filter in|out {all|<num>} delete <ifname>
Parameters
in|out : Set for
in packet
or
out packet
all|<num> - All defined filters or specific filter’s number
<ifname> - Interface name
* local is an internal interface to handle its own IP address.
Configuration example1
Filter forwards the packet satisfied by the following conditions:
Method 1 – The following filter is condition for outgoing packets to the local interface.
(conf)# filter out 10 pass tcp src 10.0.1.20/32 dst 10.0.1.1/32:23 local
(conf)# filter out 20 block tcp dst 10.0.1.1/32:23 local
(conf)# filter out 100 pass local
(conf)# filter enable layer 2
(conf)# show filter
--------------------------------------------------------------------------------
filter is applied at layer 2 (bridging)
if fid flag source address block destination address block
--------------------------------------------------------------------------------
local O-10 tcp =O 10.0.1.20 /32 10.0.1.1 /32: 23
local O-20 tcp =X 10.0.1.1 /32: 23
local O-100 =O
(conf)#
any address
SHDSL
10.0.1.20
any address
Ethernet
NBG440
(10.0.1.1)
X
telnet 10.0.1.1
O
telnet 10.0.1.1
X
telnet 10.0.1.1
