Specifications

Switching add switch l3filter match 8-83

Software Release 2.7.3

C613-03098-00 REV A

add switch l3filter match

Syntax ADD SWItch L3Filter MAtch={DIPaddr|IPDScp|PROTocol|

UDPDport|UDPSport}[,...] [DClass={A|B|C|Host}]

[EMPort={YES|NO|ON|OFf|True|False}] [IMPort={YES|NO|ON|

OFf|True|False}] [NOMATCHAction={SETPRIORITY|SENDCOS|

MOVETOSTOPRIO|SETIPDSCP|SENDNONUNICASTTOPORT|

FORWARD}[,...]] [NOMATCHDscp=1..63]

[NOMATCHPOrt=port-number] [NOMATCHPRiority=0..7]

[NOMATCHTos=0..7] [SClass={A|B|C|Host}] [TYpe={802|

Ethii|Snap}]

where:

■ port-number is the switch port number from 1 to m where m is the highest

numbered Ethernet switch port, including uplink ports.

Description This command adds a filter that specifies the matching filter criteria used for

the hardware-based packet filtering mechanism.

Up to 8 filters may be created. On the Rapier i Series switches only, up to 16

filters may be created.

Each filter is automatically assigned a filter-id number, which is in the output of

the show switch l3filter command on page 8-220. Once the filter has been

created, entries must be added using the add switch l3filter entry command

on page 8-80.

Enabling the Internet Group Management Protocol (IGMP) with the ENABLE

IP IGMP command also enables Layer 3 filtering. IGMP uses two Layer 3

filters, so the number of available filters is reduced by two. IGMP cannot be

enabled unless two filters are still available.

The switch hwfilter classifier commands may not be used with the switch

l3filter commands.

The match parameter specifies a comma-separated list of packet fields and/or

types to match. There is no default.

The dclass parameter specifies the IP destination address mask to apply to the

destination IP address field in packets when matching destination IP

addresses. If A is specified, a Class A mask of 255.0.0.0 is used. If B is specified,

a Class B mask of 255.255.0.0 is used. If C is specified, a Class C mask of

255.255.255.0 is used. If host is specified, a host mask of 255.255.255.255 is used.

The default is for no mask to be used (a value of 0). The dclass parameter is

required if dipaddr is specified by the match parameter.

The emport parameter specifies whether the filter applies to all egress ports or

to a specific one. If no, off, or FALSE is specified, the filter is applied to all

egress ports. If yes, on, or true is specified, the filter is applied to the egress

port specified by the eport parameter in the add or set switch l3filter entry

command. The default is false, meaning the filter is applied to all egress ports.

The import parameter specifies whether the filter applies to all ingress ports or

to a specific one. If no, off, or false is specified, the filter is applied to all ingress

ports. If yes, on, or true is specified, the filter is applied to the ingress port