
Using Traffic Filters
1-13
Using Filter Templates
When you create traffic filters, it is important to understand the difference between
a traffic filter template and an actual traffic filter.
A traffic filter template is a reusable, predefined specification for a traffic filter.
Each template contains a complete filter specification (criterion, ranges, and
action) for one protocol, but is not associated with a specific interface or circuit.
You create a traffic filter when you use the Configuration Manager to apply (save)
a traffic filter template to a configured router interface. You can apply a single
template to as many interfaces as you want, thus creating multiple filters for that
protocol.
When you want to add a filter to an interface, you have several options:
• If there is a template that contains the exact filtering instructions that you want
for this interface, apply that template to this interface.
• If there is a template that contains filtering instructions similar to what you
want, copy, rename, and edit the template. Then apply the new template to the
appropriate interface.
• If there is no template containing filtering instructions similar to what you
want for this interface, you must create a template from scratch. Then apply
the new template to the appropriate interface.
• If there is an existing filter on the interface that contains instructions similar to
what you want, edit the existing filter directly and save it.
Creating a Template
You create traffic filter templates using protocol-specific windows within the
Configuration Manager. You can create as many as 500 traffic filter templates for
each interface.
Note: You can also edit or copy a template using a text editor. The
Configuration Manager stores all templates for all protocols in a file called
template.flt. In the Unix filesystem, the pathname is /usr/filters/template.flt.
Comentarios a estos manuales