Specifications

Switching 8-57
Software Release 2.7.3
C613-03098-00 REV A
2. Create the filter by using the command:
add switch hwfilter classifier=classifier-list
[action={setpriority|sendcos|settos|deny|sendeport|
sendmirror|movepriototos|movetostoprio|setipdscp|
sendnonunicasttoport|nodrop|forward}[,...]]
[newipdscp=0..63] [newtos=0..7]
[nomatchaction={setpriority|sendcos|settos|deny|
sendeport|sendmirror|movepriototos|movetostoprio|
setipdscp|sendnonunicasttoport|forward}[,...]]
[nomatchdscp=0..63] [nomatchport=port-number]
[nomatchpriority=0..7] [nomatchtos=0..7]
[port=port-number] [priority=0..7]
3. Verify the filter by using the command:
show switch hwfilter [classifier=classifier-list]
How to delete
classifier-based filters
To stop the switch from filtering packets that match a particular classifier, use
the command:
delete switch hwfilter classifier=classifier-list
How to disable and
enable filtering
The switch automatically enables classifier-based packet filtering when you
add the first filter. To disable it, use the command:
disable switch hwfilter
If the switch is not forwarding packets as you expect, disabling filtering may
help with troubleshooting by indicating whether your filters are the cause of
the behaviour. To enable classifier-based packet filtering again, use the
command:
enable switch hwfilter
When Internet Group Management Protocol (IGMP) Snooping is enabled,
hardware filtering is also enabled. IGMP snooping is enabled by default.
Hardware filtering cannot be disabled unless IGMP snooping is first disabled
by using the command:
disable igmpsnooping
Layer 3 Filter Matches
As an alternative to classifier-based filters, Layer 3 filter matches can be
configured to determine which fields in each packet are matched, whether
ingress or egress ports are to be matched, and the source and destination class
of IP masks to apply to the packets. An entry added to a filter specifies the
values to be matched for each field and the action to be taken on packets
matching the filter entry. Layer 3 filter matches can perform the same actions as
classifier-based hardware filters, but classifiers match a wider range of packet
types.
Filters can be configured while Layer 3 filtering is disabled or enabled, but it
must be enabled for any of the existing filters to take effect. To enable the Layer
3 filter function, use the enable switch l3filter command on page 8-136.
Disable it with the disable switch l3filter command on page 8-117.
When Internet Group Management Protocol (IGMP) Snooping is enabled,
Layer 3 filtering is also enabled. Layer 3 filtering cannot be disabled unless
IGMP snooping is first disabled, using the command disable igmpsnooping