Alcatel-Lucent 7450 ESS Series, Руководство по настройке, Страница: 359 / 540

Filter Policies
7450 ESS OS Router Configuration Guide Page 359
Packet Match Criteria
SROS-based routers/switches support L2, L3 and L4 and above match criteria in IPv4, IPv6 and
MAC filters. Type and scale of each criteria supported depends on the platform, please see your
Alcatel-Lucent representative for further details. As few or as many match parameters can be
specified as required, but all conditions within a single filter policy entry must be met in order for
the packet to be considered a match and the specified action performed. Any match criteria will be
ignored unless explicitly defined. The process stops when the first complete match is found with
triggers execution of the action defined in the entry.
IP filter policy entry match criteria includes the following:
• src-ip/dst-ip
Match for the specified DSCP value against the Differentiated Services Code Point/Traffic
Class field of the outer IPv4/IPv6 header of the packet.
• Destination IP address and mask — Destination IP address and mask values can be
entered as search criteria.
• protocol — Match for the specified protocol against the Protocol field (for example, TCP,
UDP, IGMP) of the outer IPv4 header of the packet.
• src-port/dst-port — When protocol (IPv4) specifies TCP, UDP, or both for this entry, it
matches against the Source Port Number/Destination Port Number of the outer IPv4
header of the packet.
• Destination port/range — Entering the destination port number or port range allows the
filter to search for matching TCP or UDP values .
• dscp — Match for the specified DSCP value against the Differentiated Services Code
Point/Traffic Class field of the outer IPv4 header of the packet. See
Table 10, DSCP Name
to DSCP Value Table, on page 361 .
• icmp-code — Match for the specified value against the Code field of the ICMP header of
the packet.
• icmp-type — Match for the specified value against the Type field of the ICMP header of
the packet.
• fragment — Enable fragmentation support in filter policy match. For IPv4, match against
MF bit or Fragment Offset field to determine whether the packet is a fragment or not.
• ip-option — Match for the specified option in the first option of the IPv4 packet.
• option-present — Match for the presence or absence of the IP options in the IPv4 packet.
Padding and EOOL are also considered as IP options.
• multiple-options — Match when an IPv4 packet contains multiple IP options or not.
• src-route-option — Match when a packet contains IP Option 3 or 9 (Loose or Strict Source
Route) in the first 3 IP Options or if a packet has more than 3 IP Options.