Mixing Pass and Drop Rules

GigaVUE‑OS lets you mix pass and drop rules on a single port. Mixing pass and drop rules can be useful in a variety of situations. The following example shows a pass rule set up to include all traffic matching a particular source port range combined with a drop rule configured to exclude ICMP traffic.

Description

CLI Commands

Enters the map prefix mode for a map named mymap.

(config) map alias mymap

Specifies the map type and subtype

(config map alias mymap) # type regular byRule

Specifies that this map will apply to traffic arriving on network port 1/1/x5.

(config map alias mymap) # from 1/1/x5

Specifies that packets matching this map will be sent to tool port 3/5/x5.

(config map alias mymap) # to 3/5/x5

Create a rule that will match all packets with a source port between 20..66.

(config map alias mymap) # rule add pass portsrc 20..66

Create a rule that will drop all ICMP-IPv4 traffic.

(config map alias mymap) # rule add drop protocol icmp-ipv4

Exits the map prefix mode.

(config map alias mymap) # exit

Drop Rules Have Precedence!

Keep in mind that within a map, drop rules have precedence over pass rules. So, if a packet matches both a pass and a drop rule in the same map, the packet is dropped rather than passed.