Nortel BCM50e, Configuration

Page: 128 / 311

128 Chapter 11 Filter configuration
N0115789
Configuring a Generic Filter Rule
This section shows you how to configure a generic filter rule. With generic rules
you can filter non-IP packets. For IP packets, it is generally easier to use the IP
rules directly.
For generic rules, the Business Secure Router treats a packet as a byte stream as
opposed to an IP or IPX packet. You specify the portion of the packet to check
with the
Offset (from 0) and the Length fields, both in bytes. The Business
Secure Router applies the Mask (using the bit-wise-AND action) to the data
portion before comparing the result against the Value to determine a match. The
Mask and Value are specified in hexadecimal numbers. Note that it takes two
hexadecimal digits to represent a byte, so if the length is 4, the value in either field
will take 8 digits, for example,
FFFFFFFF .
To configure a generic rule, select
Generic Filter Rule
in the Filter Type field
in menu 21.1.4.1 and press [ENTER] to open Generic Filter Rule, as shown in
Figure 60 .
Figure 60 Menu 21.1.1.1: Generic Filter Rule
Menu 21.1.1.1 - Generic Filter Rule
Filter #: 1,1
Filter Type= Generic Filter Rule
Active= No
Offset= 0
Length= 0
Mask= N/A
Value= N/A
More= No Log= None
Action Matched= Check Next Rule
Action Not Matched= Check Next Rule
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle.