Net Optics Director Switch User Manual


 
Director
35
Note: __________________________________________________________________________________________________
Instead of lteradd, you can use a lterins command to dene lters. The only difference is that lterins
allows you to specify the lter's ID, which is its position in the pending lter list. (Use lterlist so see the IDs
of all pending lters.) When you use a lterins command, the rst argument must be id=<id> where <id> is a
decimal number in the range 1 to 999. For example: lterinsid=2in_ports=n1.1out_ports=m.1denes a lter
that sends all the trafc from Network Port 1 to Monitor Port 1 and places this lter in the second location in the
pending lter list.
________________________________________________________________________________________________________
Tip! ___________________________________________________________________________________________________
The lterdel command can be used to delete a lter from the pending lter list. The syntax is a lterdelid=<id>
where <id> is a decimal number in the range 1 to 999 corresponding to the position in the pending lter list. Use
the lterlist command so see the IDs of all pending lters.
________________________________________________________________________________________________________
Exclusive lters
Filters can be specied using action=drop in order to create exclusive lters. (An exclusive lter excludes packets rather
an including them.) For example, suppose you would like to monitor all trafc on a link except for the UDP trafc. To
specify this lter, use the following commands. Note that the drop lter must come rst so it is earlier in the CAM.
lteraddin_ports=n1.1ip_proto=17action=drop
lteraddin_ports=n1.1action=redirredir_ports=m.1
ltercommit
Monitor Port 1
All
Network Port 1
(drop)
match
no match
Protocol =
UDP
lter add in_ports=n1.1 ip_proto=17 action=drop
lter add in_ports=n1.1 action=redir redir_ports=m.1
CAM
Address Filter
1 n1.1 ip_proto=UDP action=drop
2 n1.1 m.1
Creating an exclusive lterFigure 38:
Tip! ___________________________________________________________________________________________________
If you only dene switch connections, with no ltering, the CAM is not involved and the switches do not interact.
________________________________________________________________________________________________________
Tip! ___________________________________________________________________________________________________
Filters that use exclusive sets of Network ports (each Network port is included in only a single lter) do not interact.
For example,
lteraddin_ports=n1.1-n1.5<lter_parameter_list> <monitor_port_list>
does not interact with
lteraddin_ports=n1.6-n1.10<lter_parameter_list> <monitor_port_list>
________________________________________________________________________________________________________