3Com 3C421600A, Руководство по управлению

Страница: 229 / 300

Configuring Filters
227
To enable filter access for a specific interface, use the following
command:
set interface <rm0/slotx/mod:[1-4]> filter_access off
Filter file changes take effect on an interface immediately when you issue
the
set interface command
. The
set switched interface
and
set modem_group
commands can also be issued to turn filter
access on or off.
Interface Filters
You can configure interface filters for any interface or modem group .
Interface filters control access to all networks available for both modem
and non-modem (eth:1 or eth:2) interfaces.
You can specify whether a filter applies to packets entering the interface
(input filter), packets leaving the interface (output filter), and packets that
can initiate a call out (call filter). The RAS 1500 examines the filtering
rules to determine whether the interface accepts or rejects the packet.
Interface filters can be applied dynamically without having to disable and
re-enable each network on that interface.
If you prefer to configure a filter through a modem group, first issue the
add modem group <name> interfaces <rm0/slot[1-2]/mod:[1-4]
or
pem[1-2]/slot[1-2]/mod:[1-4]>
command.
Use either of the following commands:
set interface <rm0/slot[1-2]mod [1-4]> input_filter
<filter_name> output_filter <filter_name>
set modem_group <name> input_filter <filter_name>
output_filter <filter_name>
Input Filter
If an input filter is configured on an interface, all received packets are
checked against the filtering rules before being forwarded to another
interface. In other words, an input filter handles data
from an interface.
Output Filters
If an output filter is configured on an interface, all outbound packets are
checked against the filtering rules before exiting the interface. In other
words, an output filter handles data
to an interface.