Router interface filter commands

egress

Syntax

egress

Context

config>router>interface

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure egress network filter policies for the IP interface. If an egress filter is not defined, no filtering is performed.

ingress

Syntax

ingress

Context

config>router>interface

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure ingress network filter policies for the IP interface. If an ingress filter is not defined, no filtering is performed.

filter

Syntax

filter ip ip-filter-id

filter ipv6 ipv6-filter-id

no filter

Context

config>router>if>ingress

config>router>if>egress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command associates an IP filter policy with an IP interface.

Filter policies control packet forwarding and dropping based on IP match criteria.

The ip-filter-id and ipv6-filter-id must have been preconfigured before this filter command is executed. If the filter ID does not exist, an error occurs.

Only one filter ID can be specified.

Note:

For more information about service and IP interface support for different ACL match criteria per platform, see the tables in the Applying filter policies section.

The no form of this command removes the filter policy association with the IP interface.

Parameters

ip-filter-id

Specifies the ID for the IP filter policy expressed as a decimal integer. The filter policy must already exist within the config>filter>ip context.

Values

1 to 65535

ipv6-filter-id

Specifies the ID for the IPv6 filter policy expressed as a decimal integer. The filter policy must already exist within the config>filter>ip context.

Values

1 to 65535