Net Optics none Network Router User Manual


  Open as PDF
of 57
 
38
*** Condential - DO NOT Distribute ***
Director
Be aware of these similar pairs of commands:
lterdiscard• clears the pending lter list, while lterclear clears the CAM
lterlist• shows the pending lter list, while lterrunningshows the CAM
ltercommit• copies the pending lter list to the CAM, while ltersync copies the CAM to the pending lter list
Pending lter list
Address Filter
1
2
lter discard to clear
lter list to view contents
CAM
Address Filter
1
2
lter clear to clear
lter running to view contents
lter commit
lter sync
Pairs of similar lter commandsFigure 45:
User interactions
When multiple users are logged into Director at the same time, each user has a separate pending lter list in which to
create lter congurations. However, there is only one CAM, so any time a user executes a commit orltercommit
command, the CAM takes on the lter conguration from that user's pending lter list, and those become the active
lters on Director. For this reason, it is a good idea to use a ltersyncto get the current contents of the CAM before
adding or modifying lters; that way, the lters that you don't touch remain unaffected after you commit.
Filter capacity
The capacity of Director's ltering function is roughly 1,000 lter elements per chassis, where a lter element is
a port list or a lter parameter. For example, lteraddin_ports=n1.1-n1.7ip_proto=6vlan=100action=redir
redir_ports=m.1-m.5,m.10 has four lter elements:
in_ports=n1.1-n1.71.
ip_proto=62.
vlan=1003.
redir_ports=m.1-m.5,m.104.
Counting lter elements is only a rough gauge of lter utilization, and is not recommended. Instead, examine the
pending lter list or CAM contents with lterlistandlterrunningcommands. The CAM has 512 locations, so
the number of lter entries or lter IDs is an indication of how much ltering capacity has been utilized. For example,
if the highest lter ID is 256, then half of the lter capacity is utilized. The actual capacity may exceed 1,000 lter
elements because one CAM location can contain multiple lter elements. However, be aware that IPv6 addresses (when
available) require additional CAM space and therefore ll the CAM more quickly than IPv4 addresses.
 previous next