3Com CoreBuilder 3500, Руководство по внедрению, Страница: 216 / 592

216 C
HAPTER
10: P
ACKET
F
ILTERING
■
Deleting packet filters — Deleting a packet filter removes the filter
from the system. A filter cannot be deleted if it is assigned. You must
unassign the filter from any ports before you can delete the filter. Use
the
bridge packetfilter delete
command.
■
Editing, checking, and saving custom packet filters — You can
use the built-in line editor to edit custom packet filters. After you save
the custom packet filter, the software examines it for syntax errors.
The system software does not allow you to assign the packet filter to a
port until the filter is error-free. Use the
bridge packetfilter edit
command.
You can also edit a packet filter using an ASCII-based text editor such
as EMACS, vi, or Notepad.
■
Loading packet filters — After you create custom packet filters
using an external text editor, you must download the filters using the
TFTP or FTP file transfer protocol onto the system from the network
host on which you created them. When you have loaded it, the packet
filter definition is converted into the internal format that is used by the
packet filter code in the system. Use the
bridge packetfilter load
command.
■
Filters created with the Filter Builder Web Management application
can be downloaded directly from Filter Builder. See the example in
“Downloading Custom Packet Filters” later in this chapter.
■
Assigning packet filters — When you assign a packet filter to one
or more ports, you must select the ports and a processing path. For
descriptions of the available packet processing paths, see Table 28 at
the beginning of this chapter. Each path of each port can have only
one packet filter assigned to it; however, you can assign a single
packet filter to multiple paths and ports. Use the
bridge
packetfilter assign
command.
■
Unassigning packet filters from ports — To unassign a packet filter
from one or more ports, the packet filter must have been assigned to
at least one port. Use the
bridge packetfilter unassign
command.
■
Defining port groups — Before you assign packet filters that refer to
port groups, create the port groups. See “Defining Port Groups” later
in the chapter for more information.
See the Command Reference Guide for more information about using
these commands and management functions.