Chapter 17: IP Packet Filters, Subscriber Management
STANDARD Revision 1.0
C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved.
570
Port Filter Drop Command Examples
The following are drop examples pertaining to source and destination port filter group commands.
A command example to filter drops UDP packets for a destination port of 50,000:
configure cable filter group 11 index 1 ip-proto 17 dest-port 50000 action drop
A command example to filter drops all TCP packets from a given source port to a given destination port:
configure cable filter group 20 index 2 ip-proto 6 src-port 2101 dest-port 10122 action drop
The filters created by the following two commands will cause the C4/c CMTS to drop all telnet packets:
configure cable filter group 10 index 1 src-port 23 match-action drop
configure cable filter group 10 index 2 dest-port 23 match-action drop
IP Protocol Filters
IP packet header filtering can be configured for IP protocols.
IP Source and Destination Filters
These filters are used to pass, drop, or log matching IPv4 or IPv6 source and destination addresses:
dest-ip
IPv4 destination address
dest-mask
IPv4 source address mask
src-ip
IPv4 source address
src-mask
IPv4 source address mask
v6-dest-address
IPv6 destination address
v6-dest-pfxlen
IPv6 destination address prefix length
v6-src-address
IPv6 source address
v6-src-pfxlen
IPv6 source address prefix length
IP Protocol Values
The match-all value for the IP protocol (ip-proto) field is 256. If the ip-proto field in the command is set to 256, then all IP
packet protocol values are considered a match.