Mixing Pass and Drop Rules
GigaVUE‑OS lets you mix pass and drop rules on a single port. Mixing pass and drop rules can be useful in a variety of situations. The following example shows a pass rule set up to include all traffic matching a particular source port range combined with a drop rule configured to exclude ICMP traffic.
Description |
CLI Commands |
Enters the map prefix mode for a map named mymap. |
(config) map alias mymap |
Specifies the map type and subtype |
(config map alias mymap) # type regular byRule |
Specifies that this map will apply to traffic arriving on network port 1/1/x5. |
(config map alias mymap) # from 1/1/x5 |
Specifies that packets matching this map will be sent to tool port 3/5/x5. |
(config map alias mymap) # to 3/5/x5 |
Create a rule that will match all packets with a source port between 20..66. |
(config map alias mymap) # rule add pass portsrc 20..66 |
Create a rule that will drop all ICMP-IPv4 traffic. |
(config map alias mymap) # rule add drop protocol icmp-ipv4 |
Exits the map prefix mode. |
(config map alias mymap) # exit |
Drop Rules Have Precedence!
Keep in mind that within a map, drop rules have precedence over pass rules. So, if a packet matches both a pass and a drop rule in the same map, the packet is dropped rather than passed.