
Using Traffic Filters
308645-14.00 Rev 00
1-5
You can also improve application response time and prevent session timeouts by
implementing protocol prioritization.
Combine Filters
On most interfaces, you can apply as many as 31 inbound and 31 outbound traffic
filters for each protocol. You can configure IP interfaces to support as many as 127
inbound traffic filters.
As you add filters to an interface, the Configuration Manager numbers them
chronologically (Filter No. 1, Filter No. 2, Filter No. 3, and so on). The filter rule
number determines the filter’s precedence. Lower numbers have higher
precedence; Filter No. 1 has the highest precedence. If a packet matches two
filters, the filter with the highest precedence (lowest number) applies.
After you create traffic filters, you can change their precedence by reordering
them. See “Changing Inbound Traffic Filter Precedence” on page 6-18 (inbound
traffic filters) or “Changing Outbound Traffic Filter Precedence” on page 7-21
(outbound traffic filters).
Build a Firewall
If your filtering strategy involves blocking most or all inbound traffic (a firewall)
you can create a Drop-all filter for each protocol on the interface. That means for
each protocol you are filtering, you choose a filter criterion that appears in every
packet of the protocol (for example, a MAC address).
You can also create exceptions to the Drop-all filter by adding more-specific,
higher-precedence filters to allow only specified traffic on an interface. See
“Using a Drop-All Filter As a Firewall” on page B-12 for more information about
combining filters to accept certain traffic.
Kommentare zu diesen Handbüchern