Alcatel-Lucent 7750 SR-OS, Руководство по настройке

Страница: 431 / 674

Filter Policies
7750 SR OS Router Configuration Guide Page 431
whether the packet is a fragment or not. For IPv6, match on initial fragment is also
supported.
• ip-option — Match for the specified option in the first option of the IPv4 packet.
• option-present — Match for the presence or absence of the IP options in the IPv4 packet.
Padding and EOOL are also considered as IP options.
• multiple-options — Match when an IPv4 packet contains multiple IP options or not.
• src-route-option — Match when a packet contains IP Option 3 or 9 (Loose or Strict Source
Route) in the first 3 IP Options or if a packet has more than 3 IP Options.
• tcp-ack/tcp-syn — When protocol (IPv4) or next-header (IPv6) specify TCP, match for the
TCP ACK/TCP SYNC flag presence/absence in the TCP header of the packet.
MAC filter policies match criteria includes the following:
• frame-type — Entering the frame type allows the filter to match for a specific type of
frame format; for example, Ethernet-II will match for only ethernet-II frames.
• src-mac— Entering the source MAC address range allows the filter to search for matching
a source MAC address and/or range.
• dst-mac— Entering the destination MAC address range allows the filter to search for
matching a destination MAC address and/or range.
• dot1p — Entering an IEEE 802.1p value or range allows the filter to search for matching
802.1p frame.
• etype— Entering an Ethernet type II Ethertype value to be used as a filter match criterion.
The Ethernet type field is a two-byte field used to identify the protocol carried by the
Ethernet frame.
• ssap— Specifying an Ethernet 802.2 LLC SSAP value allows the filter to match a source
access point on the network node designated in the source field of a packet.
• dsap— Specifying an Ethernet 802.2 LLC DSAP value allows the filter to match a
destination access point on the network node designated in the destination field of a
packet.
• snap-pid— Specifying an Ethernet
IEEE 802.3 LLC SNAP
PID allows the filter to match the
two-byte protocol ID that follows the three-byte OUI field. The DSAP and mask accepts
decimal and hex in the range of 0 to 65535.
• isid — Specifying an Ethernet IEEE 802.1ag ISID from the I-TAG value allows the filter
to match the 24 bits ISID value from the PBB I-TAG. This match criteria is mutually
exclusive with all the other match criteria under a particular mac-filter policy. The
resulting mac-filter can be applied as required on a BVPLS SAP or PW basis just in the
egress direction. A new
mac-filter type attribute is defined to control the use of ISID
match criteria and must be set to isid to allow the use of isid match criteria.
• inner-tag/outer-tag — Specifying inner-tag/outer-tag VLAN ID values allows the filter to
match on the non-service delimiting tags as described earlier in this document. This match