This document describes the NetBIOS Name and Byte filtering configuration and monitoring commands. It includes:

Displaying the NetBIOS Filtering Prompts

Enter configuration commands at the NetBIOS Filter config> prompt. Display this prompt as follows:

Config>protocol bridge
Transparent Bridge user configuration
Bridge Config>netbios

NetBIOS Support User Configuration

NetBIOS config>set filter name
NETBIOS Filtering configuration
NETBIOS Filter config>

Bridge>netbios

NetBIOS Support User Console

NetBIOS>set filter name
NETBIOS Filter>

• Filter lists, which are made up of one or more filter items

• Filter items, which specify the NetBIOS names you want to filter

You configure NetBIOS name and byte filters for each port and specify whether the filter applies to input or output packets.

The following sections provide examples of how to set up a host name filter and a byte filter. NetBIOS Name and Byte Filter Commands describes the commands used in these examples.

Example 1: Creating a Name Filter

Config>protocol bridge
Transparent Bridge user configuration
Bridge Config>netbios
NetBIOS Support User Configuration
NetBIOS config>set filter name
NETBIOS Filtering configuration
NETBIOS Filter config>

1. Create an empty name filter list.

Enter create name-filter-list. The software prompts you to name your filter list.

NetBIOS Filter config>create name-filter-list
Handle for Name Filter List []? boston

2. Display the configuration prompt for the filter list you just created.

Enter update. The router prompts you for the name of the filter list.

NetBIOS Filter config>update
Handle for Filter List []? boston
Name Filter List Configuration
NetBIOS Name boston config>

3. Add filter items to the filter list.

When you add a filter item, you must specify the following parameters in this order:

• Inclusive (bridged) or exclusive (dropped).

• ASCII or hex is how you enter the name.

• Hostname is the actual name in either an ASCII or hex format. This entry is case sensitive.

• Special 16th character is an optional parameter for use with ASCII strings containing fewer than 16 characters.

The following example adds a filter item to the filter list boston, which allows packets containing the name westboro (an ASCII string) to be bridged (configured as inclusive). No Special 16th character is configured.

NetBIOS Name boston config>add inclusive ascii  

Hostname []? westboro
Special 16th character in ASCII hex(<CR> for no special char)[]?

If you do not want to be prompted, enter all parameters as one string on the command line. Use a space between each parameter.

4. Verify the filter item entry.

Enter list to verify your entry.

NetBIOS Name boston config>list
NAME Filter List Name: boston
NAME Filter List Default: Inclusive

Item #   Type    Inc/Ex    Hostname         Last Char

   1      ASCII    Inc      westboro  

5. Add additional filter items to the filter list.

Repeat step 3 to add filter items to the filter list.

The order in which you enter filter items is important. This determines how the router applies the filter items to a packet. The first match stops the application of filter items and the router either forwards or drops the packet, depending on whether the filter item is Inclusive or Exclusive.

Entering the most common filter items first makes the filtering process more efficient because the software is more likely to make a match at the beginning of the list.

If the packet does not match any of the filter items, the router uses the default condition (Inclusive or Exclusive) of the filter list. You can change the default condition of the list by entering default inclusive or default exclusive at the filter list configuration prompt. For example:

NETBIOS Name boston config>default exclusive

6. When you finish adding filter items to the filter list, enter exit to return to the NetBIOS Filter config> prompt.

NetBIOS Name boston config>exit
NetBIOS Filter config>

7. Add the filter list to your configuration.

Use the filter-on command. When you turn on a name filter, you must specify the following parameters in this order:

• Input filters incoming packets or output filters outgoing packets.

• Port# is the desired configured bridging port number on the router.

• Filter-list is the name of the filter list (containing filter items) that you want to be included in this filter.

• Optionally add additional filter lists to the filter. Enter AND or OR in upper-case letters followed by a filter list name.

The following example adds a name filter comprised of the name filter list boston. The router evaluates all packets input on port 3 according to the filter items in the filter list boston. This means the router bridges all packets input on port 3 that contain the name westboro.

NetBIOS Filter config>filter-on input
Port Number [1]? 3
Filter List []? boston

8. Enter list to verify the new filter.

NetBIOS Filter config>list

NetBIOS Filtering: Disabled

NetBIOS Filter Lists
--------------------

    Handle           Type

    nlist            Name
    newyork          Name
    HELLO            Byte
    boston           Name

NetBIOS Filters
---------------

    Port #      Direction      Filter List Handle(s)

       3          Output       nlist
       1          Input        newyork OR HELLO
       3          Input        boston

9. Globally enable NetBIOS name and byte filtering on the router.

Enter enable netbios-filtering.

NetBIOS Filter config>enable netbios-filtering

Config>protocol bridge
Transparent Bridge user configuration
Bridge Config>netbios

NetBIOS Support User Configuration

NetBIOS config>set filter byte
NETBIOS Filtering configuration
NETBIOS Filter config>

1. Create an empty byte filter list.

Use the create byte-filter-list command.

NetBIOS Filter config>create byte-filter-list
Handle for Byte Filter List []? westport

2. Display the configuration prompt for the filter list you just created.

Enter update. The router prompts you for the name of the filter list.

NetBIOS Filter config>update
Handle for Filter List []? westport
Byte Filter List Configuration
NetBIOS Byte westport config>

3. Add filter items to the byte filter list.

When you add a filter item, you must specify the following parameters in this order:

• Inclusive (bridged) or exclusive (dropped).

• Byte offset is the number of bytes (in decimal) to offset into the packet the router is filtering. This starts at the NetBIOS header of the packet. Zero specifies that the router examines all bytes in the packet.

• Hex pattern is a hexadecimal number the router uses to compare with the bytes starting at the byte offset. See NetBIOS Name and Byte Filter Commands for syntax rules.

• Hex mask if present, must be the same length as hex pattern. It is logically ANDed with the bytes in the packet, starting at byte offset, before the router compares the result with the hex pattern. If you omit the hex mask, the router considers it to be all binary 1s.

The following example adds a filter item to the byte filter list westboro that causes the router to bridge packets with a hex pattern 0x12345678 at a byte offset of 0 (configured as inclusive). No hex mask is present.

NetBIOS Byte westport config>add inclusive
Byte Offset [0]? 0
Hex Pattern []? 12345678
Hex Mask (<CR> for no mask) []?

4. Verify the filter item entry with the list command.

NetBIOS Byte westport config>list

BYTE Filter List Name: westport
BYTE Filter List Default: Inclusive

 Item #   Inc/Ex   Offset  Pattern        Mask

   1       Inc        0    0x12345678     0xFFFFFFFF

5. Add additional filter items to the filter list.

Repeat step 3 to add filter items to the filter list.

The order in which you enter filter items is important. This determines how the router applies the filter to a packet. The first match stops the application of filter items and the router either forwards or drops the packet, depending on whether the filter item is inclusive or exclusive.

Entering the most common filter items first makes the filtering process more efficient because the software is more likely to make a match at the beginning of the list rather than having to check the whole list before making a match.

If the packet does not match any of the filter items, the router uses the default condition (Inclusive or Exclusive) of the filter list. You can change the default condition of the list by entering default inclusive or default exclusive at the filter list configuration prompt. For example:

NETBIOS Byte westport config>default exclusive

6. When you have finished adding filter items to the list, enter exit to return to the NetBIOS Filter config> prompt.

NetBIOS Byte westport config>exit
NetBIOS Filter config>

7. Add the filter to your configuration.

Use the filter-on command. When you turn on a byte filter, you must specify the following parameters in this order:

• Input filters incoming packets or output filters outgoing packets.

• Port Number is the desired configured bridging port number.

• Filter List is the name of the filter list (containing filter items) that you want included in this filter.

• Optionally add additional filter lists to the filter. Enter AND or OR in upper-case letters followed by a filter list name.

The following example adds a byte filter to packets output on port 3. It is comprised of the byte filter list westboro. The router evaluates all packets output on port 3 according to filter items contained in the filter list westboro.

NetBIOS Filter config>filter-on output
Port Number [1]? 3
Filter List []? westboro

8. Verify the new filter.

Enter list to verify the filter.

NetBIOS Filter config>list

NetBIOS Filtering: Disabled

NetBIOS Filter Lists
--------------------

    Handle           Type

    nlist            Name
    newyork          Name
    HELLO            Byte
    westboro         Byte

NetBIOS Filters
---------------

    Port #      Direction      Filter List Handle(s)

       3          Output       nlist
       1          Input        newyork OR HELLO
       3          Output       westboro

9. Globally enable NetBIOS name and byte filtering on the router.

Enter enable netbios-filtering.

NetBIOS Filter config>enable netbios-filtering

[C] means the command is available at the NetBIOS Filter config> prompt.

[M] means the command is available at the NetBIOS Filter> prompt.

Table 1 NetBIOS Name and Byte Filter Commands

Command	Function
Create [C]	Creates byte filter and name filter lists for NetBIOS filtering.
Delete [C]	Deletes byte filter and name filter lists for NetBIOS filtering.
Disable [C]	Disables NetBIOS name and byte filtering on the router.
Enable [C]	Enables NetBIOS name and byte filtering on the router.
Exit [C] [M]	Returns you to the previous prompt.
Filter-on [C]	Assigns a filter to a specific port. You can then apply this filter to NetBIOS packets input or output on the specified port.
List [C] [M]	Displays all information concerning created filters.
Update [C]	Adds information to or deletes information from a name or byte filter list.

Create [C]

Syntax: create

byte-filter-list

name-filter-list

Example: create byte-filter-list

Handle for Byte Filter List []? newyork

Example: create name-filter-list

Handle for Name Filter List []? boston 

Syntax: delete

byte-filter-list

name-filter-list

filter input

filter output

Example: delete byte-filter-list

Handle for Byte Filter List []? newyork

Example: delete name-filter-list newyork

Handle for Name Filter List []? boston

Removes all information associated with the filter and fills any resulting gap in filter numbers.

Example: delete filter input

Port Number [1]? 

Removes all information associated with the filter and fills any resulting gap in filter numbers.

Example: delete filter output

Port Number [1]?

Syntax: disable netbios-filtering

Enable [C]

Syntax: enable netbios-filtering

Exit [C] [M]

Syntax: exit

Filter-on [C]

Syntax: filter-on

input

output

Port# is a configured bridging port number on the router. The port number identifies this filter. Enter list to see a list of port numbers. Use the create command to make a filter list. To add additional filter lists to this port, enter AND or OR in all capital letters followed by the filter list name.

The router applies the filter you create with this command to all incoming NetBIOS packets on the specified port. The router evaluates each filter list on the command line from left to right. If a packet matches an inclusive filter, the router bridges the packet. If a packet matches an exclusive filter, the router drops the packet.

If the packet is not one of the types that NetBIOS name or byte filtering supports, the router bridges the packet.

Example: filter-on input

Port Number [1]? 2 
Filter List []? newyork AND boston

Port# is a configured bridging port number on the router. The port number identifies this filter. Enter list to see a list of port numbers. Use the create command to make a filter list. To add additional filter lists to this port, enter AND or OR in all capital letters followed by the filter list name.

The router applies the filter you create with this command to all outgoing NetBIOS packets on the specified port. The router evaluates each filter list on the command line from left to right. If a packet matches an inclusive filter, the router bridges the packet. If a packet matches an exclusive filter, the router drops the packet.

If the packet is not one of the types that NetBIOS name or byte filtering suports, the router bridges the packet.

Example: filter-on output

Port Number [1]? 2
Filter List []? newyork OR boston

List [C]

Syntax: list

NETBIOS Filtering: Enabled

NETBIOS Filter Lists
--------------------    

    Handle           Type   
 
    boston           Name
    newport          Byte

NETBIOS Filters
---------------    
  Port #      Direction      Filter List Handle(s)           
    1          Input         boston AND newport
    2          Output        boston

List [M]

Syntax: list

byte-filter-lists

name-filter-lists

filters

Example: list byte-filter-lists

BYTE Filter List Name: newport
BYTE Filter List Default: Inclusive 

Filter Item #   Inc/Ex    Byte Offset  Pattern        Mask      
      1        Inclusive       2        0x22           0x11
      2        Exclusive       0        0x22           0x22

BYTE Filter List Name: test1
BYTE Filter List Default: Inclusive 

Filter Item #   Inc/Ex    Byte Offset  Pattern        Mask      
      1        Inclusive       2       0x22           0xFF

Example: list name-filter-lists

NAME Filter List Name: boston
NAME Filter List Default: Exclusive 

Filter Item #   Type    Inc/Ex        Hostname       Last Char
     1         ASCII   Inclusive     westboro        

NAME Filter List Name: newyork
NAME Filter List Default: Inclusive 

Filter Item #   Type    Inc/Ex        Hostname       Last Char
     1         ASCII   Inclusive      newyork1     

Example: list filters

NETBIOS Filtering: Enabled    

Port #    Direction      Filter List Handle(s)   Pkts Filtered       
  1          Input        newyork OR boston              0
  1          Output       boston AND newport 

Syntax: update filter-list

NETBIOS Byte newyork Config> 

Update Byte-Filter-List Commands

add inclusive or exclusive byte-offset hex-pattern hex-mask

Note: Adding filter items to filter lists adds to processing time due to the time it takes to evaluate each item in the list. It can affect performance in heavy NetBIOS traffic.

• Inclusive (bridged) or exclusive (dropped).

• Byte offset is the number of bytes (in decimal) to offset into the packet the router is filtering. This starts at the NetBIOS header of the packet. Zero specifies that the router examines all bytes in the packet.

• Hex pattern is a hexadecimal number used to compare with the bytes starting at the byte offset. Syntax rules for hex-pattern include no 0x in front, a maximum of 32 numbers, and an even number of hex numbers.

• Hex mask if present, must be the same length as hex pattern. It is logically ANDed with the bytes in the packet, starting at byte offset, before the router compares the result with the hex pattern. If you omit the hex mask, the router considers it to be all binary 1s.

Example: add inclusive

Byte Offset [0]?
Hex Pattern []? 
Hex Mask (<CR> for no mask) []?

Example: add exclusive

Byte Offset [0]? 4
Hex Pattern []? 09
Hex Mask (<CR> for no mask) []?

Example: default inclusive

delete filter-item

Example: delete

Filter Item Number [1]? 2

Example: exit

list

Example: list

BYTE Filter List Name:     Enginering 
BYTE Filter List Default:  Exclusive

Filter Item # 	Inc/Ex       Byte Offset    Pattern          Mask

   1          Inclusive        14         0x123456          0xFFFF00
   2          Exclusive         0         0x9876            0xFFFF
   3          Exclusive        28         0x1000000         0xFF00FF00

Example: move

Source Filter Item Number [1]? 3
After Destination Filter Item Number [0]? 1

add inclusive or exclusive ASCII host-name special-16th-char

• ADD_GROUP_NAME_QUERY: Source NetBIOS name field

• ADD_NAME_QUERY: Source NetBIOS name field

• DATAGRAM: Destination NetBIOS name field

• NAME_QUERY: Destination NetBIOS name field

• Inclusive (bridged) or exclusive (dropped).

• Hostname is an ASCII string up to 16 characters. It can contain any character but the following: . / \ [ ] : | < > + = ; , space. Use ? to indicate a single character wildcard. Use * as the final character of the name to indicate a wildcard for the remainder of the name. If the name contains fewer than 15 characters, it is padded to the 15th character with ASCII spaces.

• Special 16th character can be used if host-name has less than 16 characters. It is a hexadecimal number (with no 0x in front of it) that indicates the value for the last character. If you do not specify a 16th character on a name less than 16 characters, the router uses a ? wildcard for the 16th character.

Hostname []? newport
Special 16th character in ASCII hex (<CR> for no special character)[]? 

Hexstring must consist of an even number of hexadecimal numbers. Specify a wildcard for a single byte by ??. If you do not supply a full 32 hexadecimal numbers, the router pads ASCII blanks to the 29th and 30th numbers and supplies a wildcard as the 31st and 32nd (16th byte) numbers.

Example: add inclusive hex

Hex String []?

Example: default inclusive

delete filter-item

Example: delete

Filter Item Number [1]? 4

Example: exit

list

Example: list

NAME Filter List Name: nlist
NAME Filter List Default: Exclusive

 Filter Item #   Type    Inc/Ex        Hostname       Last Char

       1         ASCII   Inclusive     EROS            
       2         ASCII   Inclusive     ATHENA          
       3         ASCII   Exclusive     FOOBAR          

Example: move

Source Filter Item Number [1]? 
After Destination Filter Item Number [0]?