Setting Up an IPv4 Filter Configuration Job
  • 19 Sep 2024
  • 6 Minutes to read
  • Contributors
  • PDF

Setting Up an IPv4 Filter Configuration Job

  • PDF

Article summary

IPv4 filters can be used to loop back traffic or set up a traffic policy based on specific characteristics such as IPv4 Header settings, ICMP settings and VLAN settings.

To set up an IPv4 filter job

  1. Access the page Commission ▶ Jobs.

  2. Set all common configuration job settings, as described in "Creating Configuration Jobs in GUI Mode" and in "Creating Configuration Jobs Using Data Sets".

  3. Select IPv4 filter in the left pane. The IPv4 filter tab is displayed.
    Setting Up an IPv4 Filter Configuration Job.png

  4. Complete all fields in the IPv4 filter tab as required. For more information on specific parameters, see the table below.

  5. Use the Add  Button_New_Generic.png button or Duplicate Button_Duplicate.png button to add IPv4 filters as required.


Note: When duplicating a row, always select the row to duplicate before clicking the Duplicate Button_Duplicate.png button.

  1. Click Apply, then click Close.

  2. Click the Refresh Button_Refresh_Generic.png button to refresh the user interface.

IPv4 filter tab (Commission ▶ Jobs)

Filter General

ParameterDescription
NameA unique name used to identify the filter.

IPv4 Settings

ParameterDescription
SourceCheckbox to enable or disable use of the IPv4 source address and mask in the filter.
IPv4 source

Mask source

The source address and mask. These two values are combined to specify the source of packets.

To specify a particular IP address as the source, set the IPv4 address and leave the default mask value (255.255.255.255).

To specify a subnet as the source, specify the IP address and a mask. Only the bits specified by the mask are used. The other bits are ignored.

Note: Filtering source or destination IP addresses that are assigned by Dynamic Host Control Protocol (DHCP) can be problematic. It is recommended that you only specify static or reserved IP addresses in a filter. Otherwise the filter must be updated manually whenever the addresses change.

DestinationCheckbox to enable or disable use of the IPv4 destination address and mask in the filter.
IPv4 destination​

Mask destination

The destination address and mask. These two values are combined to specify the destination of packets.

To specify a particular IP address as the destination, set the IPv4 address and leave the default mask value (255.255.255.255).

To specify a subnet as the destination, specify the IP address and a mask. Only the bits specified by the mask are used. The other bits are ignored.

Note: Filtering source or destination IP addresses that areassigned by Dynamic Host Control Protocol (DHCP) can be problematic. It is recommended to only specify static or reserved IP addresses in a filter, otherwise the filter must be updated manually whenever the addresses change.

Ethernet Header Settings

Parameterheader
TTLCheckbox used to enable or disable using TTL (Time-To-Live).
TTLTTL value.
ECNCheckbox used to enable or disable using ECN (Explicit Congestion Notification).
ECNECN value. Specify either 0 or 3.
Header LengthCheckbox used to enable or disable using the header length.
Header LengthThe header length. Value expressed in 32-bit words. Specify a value in the range of 5 to 15.
ProtocolDouble-click in this field to change the value.

Either select a protocol from the drop-down list or enter a port number (decimal value) manually.

Common protocols:

  • TCP (6): Used by HTTP, FTP, Telnet and SMTP.
  • UDP (17): Used by DNS, SNMP and RIP.
  • ICMP (1): Used by Ping.
Available protocols [protocol name (port number)]:
  • ICMP (1)
  • IGMP (2)
  • IP (4)
  • TCP (6)
  • EGP (8)
  • IGP (9)
  • UDP (17)
  • IPv6 (41)
  • SDRP (42)
  • IPv6-Route (43)
  • IPv6-Frag (44)
  • IDRP (45)
  • RSVP (46)
  • GRE (47)
  • MHRP (48)
  • ESP (50)
  • AH (51)
  • MOBILE (55)
  • SKIP (57)
  • EIGRP (88)
  • OSPFIG (89)
  • IPComp (108)
  • VRRP (112)
  • Custom
CustomThe port number expected by the custom protocol.

Note: This parameter is valid only if the Protocol parameter is set to Custom.

VLAN stack sizeDouble-click in this field to change the value.

Allows you to filter based on the number of VLAN tags in the packet.

VLAN and VLAN-in-VLAN Settings

ParameterDescription
EthertypeThe VLAN Ethernet Type may be one of the following:<UL
  • C-VLAN: Customer VLAN (typically the inner tag).
  • S-VLAN: Service VLAN (typically the outer tag).
  • T-VLAN: Tunnel VLAN (either the inner or outer tag).
  • Any: Choose this option so filters will allow frames with C-VLAN, S-VLAN or T-VLAN tags through.
  • CFI/DEIThe Canonical Format Indicator (CFI) or the Drop Eligibility Indicator (DEI). This value should always be set to zero for connections to Ethernet switches.

    CFI is used to ensure compatibility between Ethernet type networks and Token Ring type networks. If a frame received at an Ethernet port has a CFI set to 1, the frame should not be forwarded as-is to an untagged port.

    In the context of bandwidth regulation, DEI can be used to carry the frame color. When set to 0, the frame is green; when set to 1, the frame is yellow.

    Priority ConditionDouble-click in this field to select an operator to be used with the Priority Min or Priority Max field.

    VLAN priority allows provisioning CoS prioritization using the standard 802.1Q priority tag. Interpreting the priorities is based on the carrier's equipment and administrative policies. The valid operator types are:

    • Greater than
    • Less than
    • Equal to
    • Range (inclusive range)
    Note: You can set only one VLAN (VLAN or VLAN-in-VLAN) to a range; the other must be set to Equal to. For instance, if you select a range for the second VLAN (VLAN-in-VLAN), you must select Equal to for the first VLAN (VLAN).
    Priority MinThe priority minimum value.

    Acceptable values range from 0 to 7.

    Priority MaxThe priority maximum value.

    Acceptable values range from 0 to 7.

    OperatorDouble-click in this field to select an operator to be used with the ID Min or ID Max field.

    The VLAN ID used to filter traffic. The valid operator types are:

    • Greater than
    • Less than
    • Equal to
    • Range (inclusive range)
    Note: You can set only one VLAN (VLAN or VLAN-in-VLAN) to a range; the other must be set to Equal to. For instance, if you select a range for the second VLAN (VLAN-in-VLAN), you must select Equal to for the first VLAN (VLAN).
    ID initialThe VLAN ID minimum value.

    Acceptable values range from 0 to 4,095.

    ID lastThe VLAN ID maximum value.

    Acceptable values range from 0 to 4,095.

    DSCP/IP Precedence

    ParameterDescription
    TypeThe DSCP/IP type may be one of the following:
    • DSCP
    • IP Precedence
    ConditionThe DSCP/IP precedence operator. The valid operator types are:
    • Greater than
    • Less than
    • Equal to
    • Range (inclusive range)
    ID initialThe DSCP/IP precedence minimum value.

    DSCP range: 0 to 63

    IP precedence range: 0 to 7

    ID lastThe DSCP/IP precedence maximum value.

    DSCP range: 0 to 63

    IP precedence range: 0 to 7

    ICMP Settings

    ParameterDescription
    ICMP typeEnables the use of ICMP. You must specify the ICMP message type to be matched by this filter.

    Note: These settings are only valid when Protocol is set to ICMP (1).

    Some well-known ICMP types are:

    • Echo Reply (0)
    • Destination Unreachable (3)
    • Redirect (5)
    • Echo (8)
    • Time Exceeded (11)
    Other ICMP Codes: See www.iana.org/
    ICMP codeEnables the use of the ICMP code.

    The ICMP code value.

    UDP/TCP Port Settings

    ParameterDescription
    Source portEnables the use of the UDP/TCP source port.

    The source port used to match this rule.

    Note: This setting is valid only when the Protocol parameter is set to TCP (6) or UDP (17).

    Destination portEnables the use of the UDP/TCP destination port.

    The destination port used to match this rule.

    Note: These settings are only valid when Protocol is set to TCP (6) or UDP (17).

    © 2024 Cisco and/or its affiliates. All rights reserved.
     
    For more information about trademarks, please visit: Cisco trademarks
    For more information about legal terms, please visit: Cisco legal terms

    For legal information about Accedian Skylight products, please visit: Accedian legal terms and tradmarks



    Was this article helpful?

    Changing your password will log you out immediately. Use the new password to log back in.
    First name must have atleast 2 characters. Numbers and special characters are not allowed.
    Last name must have atleast 1 characters. Numbers and special characters are not allowed.
    Enter a valid email
    Enter a valid password
    Your profile has been successfully updated.