How do I configure a CPM filter?

Note: To perform this procedure, you require an account with an assigned Administrator scope of command role to the sitesec package, or a scope of command role with write access permission to the sitesec package.

The 7705 SAR does not support queue or MAC CPM filters.

Steps
 
1 

Choose Administration→Security→NE CPM Filter from the NFM-P main menu. The NE CPM Filter form opens.

2 

Click Create or choose a policy and click Properties. The CPM Filter (Create|Edit) form opens.

3 

Configure the required parameters.

You can set the IP Administrative Status and IPv6 Administrative Status parameters to Up after you set the Scope parameter to cpm on the ACL IP and ACL IPv6 filter policies; see the Classic Management User Guide.

4 

To configure an IPv4 filter entry, perform the following steps.

  1. Click on the IPv4 Entries tab.

  2. Click Create or choose an entry and click Properties. The CPM IP Filter Entry (Create|Edit) form opens.

  3. Configure the required parameters.

  4. Click Select to assign a Log ID to the CPM filter entry.

    See the NSP NFM-P User Guide for information on configuring a Filter Log policy that employs this Log ID.

  5. Click on the Filter Properties tab.

  6. Configure the required parameters.

  7. Save your changes and close the form.

5 

Repeat Step 4 to configure an additional IPv4 entry, if required.

6 

To configure an IPv6 filter entry, perform the following steps.

  1. Click on the IPv6 Entries tab.

  2. Click Create or choose an entry and click Properties. The CPM IPv6 Filter Entry (Create|Edit) form opens.

  3. Configure the required parameters.

  4. Click Select to assign a Log ID to the CPM filter entry.

    See the NSP NFM-P User Guide for information on configuring a Filter Log policy that employs this Log ID.

  5. Click on the Filter Properties tab.

  6. Configure the required parameters.

  7. Save your changes and close the form.

7 

Repeat Step 6 to configure an additional IPv6 entry, if required.

8 

To configure a MAC entry, perform the following steps.

  1. Click Create or choose an entry and click Properties. The CPM MAC Filter Entry (Create|Edit) form opens.

  2. Configure the required parameters.

  3. Click Select to assign a Log ID to the CPM filter entry.

    See the NSP NFM-P User Guide for information on configuring a Filter Log policy that employs this Log ID.

  4. Click on the Filter Properties tab and configure the required parameters.

    If you set the Frame Type parameter to e802dot2LLC, configure the parameters in the Match Criteria - DSAP SSAP panel.

    If you set the Frame Type parameter to e802dot2SNAP, configure the parameters in the Match Criteria - SNAP panel.

    If you set the Frame Type parameter to Ethernet II, configure the Ether Type parameter.

  5. Save your changes and close the form.

9 

Repeat Step 8 to configure an additional MAC entry, if required.

10 

To configure a queue entry, perform the following steps.

  1. Click on the Queues tab.

  2. Click Create or choose an entry and click Properties. The CPM Filter Queue Entry (Create|Edit) form opens.

  3. Configure the required parameters.

  4. Click on the CIR/PIR and Burst Size tab and configure the required parameters.

    Ensure that the Committed Burst Size (KB) parameter value is lower than the Maximum Burst Size (KB) parameter value.

  5. Save your changes and close the form.

11 

Repeat Step 10 to configure an additional queue entry, if required.

12 

Click Apply to save the changes.

13 

Distribute the filter to NEs, as required.

14 

Close the open forms.

End of steps