Filter
Top Products
Filter Policies
7750 SR OS Router Configuration Guide Page 287
• Option value — Entering an option value enables the first filter to search for a specific IP
option. See Table 16.
• TCP-ACK/SYN flags - Entering a TCP-SYN/TCP-ACK flag allows the filter to search for
the TCP flags specified in these fields.
MAC filter policies match criteria that associate traffic with an ingress or egress SAP. Matching
criteria to drop or forward MAC traffic include:
• Source MAC address and mask
Entering the source MAC address range allows the filter to search for matching a source
MAC address and/or range. Enter the source MAC address and mask in the form of
xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx; for example, 00:dc:98:1d:00:00.
• Destination MAC address and mask
Entering the destination MAC address range allows the filter to search for matching a
destination MAC address and/or range. Enter the destination MAC address and mask in
the form of xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx; for example, 02:dc:98:1d:00:01.
• Dot1p and mask
Entering an IEEE 802.1p value or range allows the filter to search for matching 802.1p
frame. The Dot1p and mask accepts decimal, hex, or binary in the range of 0 to 7.
• Ethertype
Entering an Ethernet type II Ethertype value to be used as a filter match criterion. The
Ethernet type field is a two-byte field used to identify the protocol carried by the Ethernet
frame. The Ethertype accepts decimal, hex, or binary in the range of 1536 to 65535.
• IEEE 802.2 LLC SSAP
Specifying an Ethernet 802.2 LLC DSAP value allows the filter to match a source access
point on the network node designated in the source field of a packet. The SSAP and mask
accepts decimal, hex, and binary in the range of 0 to 255.
• IEEE 802.2 LLC DSAP
Specifying an Ethernet 802.2 LLC DSAP value allows the filter to match a destination
access point on the network node designated in the destination field of a packet. The
DSAP and mask accepts decimal, hex, and binary in the range of 0 to 255.
• IEEE 802.3 LLC SNAP PID
Specifying an Ethernet
IEEE 802.3 LLC SNAP PID allows the filter to match the two-byte
protocol ID that follows the three-byte OUI field. The DSAP and mask accepts decimal
and hex in the range of 0 to 65535.