3Com OfficeConnect 3C100XF Cli User's Manual - page 220
27-10
C
HAPTER
27: P
ACKET
F
ILTERS
Adding Filters to the
Managed List
The
add filter
command verifies filter syntax prior to adding the filter to the
managed list. If the syntax is valid, no message is generated and the command
prompt returns. If syntax errors exist, error messages are generated detailing the
cause of the errors.
If the syntax is invalid, the filter is still added to the managed list with a status of
verify failed. To correct filter file errors, you must make the changes to the original
filter file using a text editor and re-TFTP the file to flash memory. You must then
use the
verify filter
command to check the filter file syntax. For more information
about the
verify filter
command refer to the
verify filter
command write-up.
Use the
add filter
command to add a filter file to the list of managed filters.
It may be helpful to use the
list filters
command to see a list of filter files
successfully stored in flash memory.
Removing a Filter from
an Interface
set interface
input_filter““
output_filter””
Use this command to remove a filter that is assigned to an interface.
The
““
value represents a null value and removes the defined filter from the
interface. For example, to remove an output filter from an interface named eth:1,
you would use this command:
set interface eth:1 output_filter ““
Deleting a Packet Filter
delete filter
Use this command to remove a filter from the filter list.
delete file
Use this command to delete a filter file permanently from flash memory.
Verifying Filter File
Syntax
The
verify filter
command is useful if you make changes to a filter file that has
already been added to the managed list and re-TFTP the file back into FLASH
memory (using the same file name).
This command checks the filter file syntax, compiles it and if valid, generates no
message, returning you to the command prompt. If invalid the OfficeConnect
Gateway generates error messages.
Although filter file changes take effect on an interface immediately after you issue
the
set interface
command, you must
set interface
after verification to apply the
new filter rules to that interface.
For example, to verify a filter file named no_spam.flt you would enter the
following:
verify filter no_spam.flt