Filter
Top Products
Page 366 7750 SR OS Router Configuration Guide
IP Filter Entry Commands
action
Syntax action [drop]
action forward [next-hop {ip-address | indirect ip-address | interface ip-int-name}]
action forward [redirect-policy policy-name]
action forward [sap sap-id | sdp sdp-id]
action http-redirect url
no action
Context config>filter>ip-filter>entry
Description This command specifies to match packets with a specific IP option or a range of IP options in the first
option of the IP header as an IP filter match criterion. The action keyword must be entered and a
keyword specified in order for the entry to be active.
Note that action forward next-hop cannot be applied to multicast traffic.
Multiple action statements entered will overwrite previous actions parameters when defined.
The no form of the command removes the specified action statement. The filter entry is considered
incomplete and hence rendered inactive without the action keyword.
Default No action is specified, thus rendering the entry inactive.
Parameters drop — Specifies packets matching the entry criteria will be dropped.
forward — Specifies packets matching the entry criteria will be forwarded.
If neither drop nor forward is specified, the filter action is No-Op and the filter entry is inactive.
next-hop ip-address — The IP address of the direct next-hop to which to forward matching packets
in dotted decimal notation.
indirect ip-address — The IP address of the indirect next-hop to which to forward matching packets
in dotted decimal notation. The direct next-hop IP address and egress IP interface are determined
by a route table lookup.
interface ip-int-name — The name of the egress IP interface where matching packets will be
forwarded from. This parameter is only valid for unnumbered point-to-point interfaces. If the
string contains special characters (#, $, spaces, etc.), the entire string must be enclosed within
double quotes.
redirect policy-name — Specifies the redirect policy configured in the config>filter>redirect-
policy context.
sap sap-id — Specifies the physical port identifier portion of the SAP definition. Only Ethernet
SAPs are supported (including q-in-q, BCP, bridged Ethernet in Frame Relay or ATM).
Values sap-id:null[port-id | bundle-id | lag-id | aps-id]
dot1q [port-id | bundle-id | lag-id | aps-id]:qtag1
qinq [port-id | bundle-id | lag-id]:qtag1.qtag2
atm [port-id | bundle-id][:vpi/vci | vpi | vpi1.vpi2]