Filter
Top Products
IDL series User Guide
402
Example:
$ create filter subrule arp ruleid 1 subruleid 2 opcode request srcmacaddrfrom
00:01:02:03:04:05 srcmacaddrto 00:01:02:03:04:10 dstmacaddrfrom
00:02:03:04:05:11 dstmacaddrto 00:02:03:04:05:15 srcipaddrfrom 172.25.1.125
srcipaddrto 172.25.5.125 dstipaddrfrom 172.25.6.125 dstipaddrto 172.25.10.125
srcmacaddrcmp inrange dstmacaddrcmp exrange srcipaddrcmp inrange
dstipaddrcmp exrange ipsrcaddrmask 0xffff0000 ipdstaddrmask 0xffff0000
subruleprio high
Output:
Verbose Mode On
Entry Created
Rule Id : 1 Subrule Id : 2
Opcode : request
Start Src Mac Addr : 00:01:02:03:04:05 End Src Mac Addr : 00:01:02:03:04:10
Start Dest Mac Addr : 00:02:03:04:05:11 End Dest Mac Addr : 00:02:03:04:05:15
Start Src Ip Addr : 172.25.1.125 End Src Ip Addr : 172.25.5.125
Start Dest Ip Addr : 172.25.6.125 End Dest Ip Addr : 172.25.10.125
Src Mac Addr Cmp : inrange
Dest Mac Addr Cmp : exrange
Src Ip Addr Cmp : inrange
Dest Ip Addr Cmp : exrange
Ip Src Addr Mask : 0xffff0000
Ip Dest Addr Mask : 0xffff0000
Subrule Prio : high
Verbose Mode Off:
Entry Created
Parameters
Name Description
Rule Id
Unique identifier of a filter rule of which this sub rule is being
created.
Subrule Id
Unique identifier of a filter subrule.
Opcode
The opcode identifies whether the packet is ARP request or reply.
This field specifies the type of packets on which the subrule is to
be applied. If 'any' is specified, both request and reply packets are
filtered.