Specifications

8-220 show switch l3filter Rapier Switch Software Reference
Software Release 2.7.3
C613-03098-00 REV A
show switch l3filter
Syntax SHow SWItch L3Filter[=filter-id [ENTry=entry-id]]
where:
■ filter-id is a decimal number in the range 1 to the number of filters defined.
■ entry-id is a decimal number in the range 1 to the number of entries
defined.
Description This command displays hardware-based Layer 3 filtering match criteria and
their filter entries (Figure 8-43 on page 8-220, Table 8-61 on page 8-220).
Figure 8-43: Example output from the show switch l3filter command
Filter ............... 1
Matched fields ....... tos, ttl, sipaddr, dipaddr, protocol
Source address mask .. 255.255.255.0
Dest. address mask ... 255.255.255.0
Ingress port mask .... true
Egress port mask ..... true
No match action ...... none
Ent. S-Address D-Address Prot TTL TOS NewTOS Type
S-Mask D-Mask Iport Eport Port Syn/Ack/Fin
S-Port D-Port Action
-------------------------------------------------------------------------------
1 192.168.1.0 192.168.2.0 ICMP 30 2 1 0
255.255.255.0 255.255.255.0 2 3 0/0/0
- - dn
-------------------------------------------------------------------------------
2 192.168.2.0 192.168.1.0 ICMP 30 2 1 0
255.255.255.0 255.255.255.0 2 3 0/0/0
- - sc
-------------------------------------------------------------------------------
Table 8-61: Parameters in the output of the show switch l3filter command
Parameter Meaning
Filter Filter number.
Match fields A list of the fields matched by this filter; one or more of
“tos“, “ttl“, “protocol“, “sipaddr“, “dipaddr“, “tcpsport“,
“tcpdport“, “tcpsyn“, “tcpack“, “tcpfin“, “udpsport“, or
“udpdport“.
Source address mask Mask to apply to source IP address fields to determine a
match.
Destination address mask Mask to apply to destination IP address fields to determine
a match.
Ingress port mask Whether the filter applies to ingress ports.
Egress port mask Whether the filter applies to egress ports.