3Com REMOTE ACCESS SYSTEM 1500, Руководство по управлению

Страница: 228 / 300

226 C
HAPTER
14: H
ANDLING
P
ACKET
F
ILTERS
8 Return to the CLI on the RAS 1500. The RAS 1500 does not recognize a
filter file stored in its FLASH memory until you add it to the Managed
Filter Table. Use the following command:
add filter <name>
When the filter is added, the RAS 1500 automatically verifies filter file
syntax. If the syntax is valid, no message is generated and the command
prompt returns. If the syntax is not valid, an error message is generated
detailing the error source.
Type
list files
to ensure the filter file was successfully stored in
FLASH memory.
9 Use the
verify filter
command to ensure filter file syntax is correct.
Enter the following:
verify filter <filter name>
Any subsequent entry of same name filter files requires the original filter
files to be deleted using
delete filters
. Reverify and reapply using
set interface. Use
show filter <filter name>
to view your file. If
you are applying a filter to a RADIUS user, use
show remote user
.
Configuring Filters
Once a filter has been added to the managed filters list, turn filter access
on or off and assign the filter to the RAS 1500 interfaces or users.
Setting Filter Access When filters are assigned to an interface, the
filter access
parameter must remain off (
default
setting). But, if configuring a filter
for a user, you must enable filter access. This parameter acts as a toggle
switch for interface or user filtering and, when enabled, overrides the
default
interface
setting.
If your filters are inoperative, it more than likely is because you have not
correctly set filter access.
To enable filter access for a specific user, use the following command:
set interface <rm0/slotx/mod:[1-4]> filter_access on