
Configuring Traffic Filters and Protocol Prioritization
8-16
308645-14.00 Rev 00
Specifying User-Defined Criteria
You can specify user-defined criteria in IP inbound traffic filters and templates by
specifying an offset and length based on the reference fields in the IP header.
To specify user-defined criteria, navigate to the match prompt (for example,
box;
ip; filter-template/template1; match
) and enter:
user-defined reference
<value>
offset
<value>
bitwidth
<value>
range
<value>
reference
is a known bit position in the packet header.
offset
specifies the first position of the filtered bit pattern in relation to the
reference point (measured in bits).
bitwidth
specifies the total bit length that matches the packet criteria.
range
specifies a minimum and maximum target value to apply to the match
criterion. For a single value, you must specify the minimum value in hexadecimal
format. You can precede the value with 0x.
Example
This example specifies user-defined criteria to create an IP traffic filter template
that drops every packet that has a value of 192 at offset 96 from the beginning of
the IP header.
match/template/template1#
user-defined reference start-ip-header offset
96
bitwidth 16 range 0192
user-defined/template/template1/start-ip-header/96/16/0192#
back
match/template/template1#
back
filter-template/template1#
actions
actions/template/template1#
action drop
Specifying the Action of Inbound Traffic Filters and
Templates
By default, the action of each IP inbound traffic filter is to accept the packet if it
matches all of the filter’s match criteria. To change the filtering actions, navigate
to the actions prompt (for example,
box; ip; filter-template/telnet-in; actions)
and
specify one or more of the actions described in Table 8-5.
Comentarios a estos manuales