# Creating a Filter

Seven types of filters are available for static filtering based on the user-defined keyword and action for matched packets. When creating a filter, you can directly bind a Zone to the filter.

#### Procedure

1. Choose Defense > Policy Settings > Filter > Zone Filter.
2. Click .
3. On the Basic Information tab page, configure basic information about a filter. For detailed parameter description, see Table 1.

   Table 1 Basic filter information
   Parameter | Description
   --- | ---
   Name | Name of a filter.
   Device Type | Select AntiDDoS1820-N from the drop-down list box.
   Protocol | Protocol type.

4. Click the Keyword tab and configure keywords. For detailed parameter description, see Table 2.

   Table 2 Keyword
   Keyword | Description | Recommended Value
   --- | --- | ---
   protocol | Protocol | Protocol type of packets. | A maximum of 32 protocols can be specified for each filter.
   dscp | DSCP | Field of IP packets. | A maximum of 32 DSCP values can be configured for each filter.
   tcp-flag | TCP flag | TCP flag of packets. | A maximum of 16 TCP flags can be configured for each filter.
   flow-average-octets | Minimum average octets | Average octets quantity range in a flow. | A maximum of 32 average octets quantity ranges can be configured for each filter. When the packets match one average octets range configured in a filter, the packets are considered to match the filter.
   Maximum average octets
   flow-packets | Minimum number of packets | Packet quantity range in a flow. | A maximum of 32 packet quantity ranges can be configured for each filter. When the packets match one packet quantity range configured in a filter, the packets are considered to match the filter.
   Maximum number of packets
   flow-octets | Minimum number of octets | Octet quantity range in a flow. | A maximum of 32 octet quantity ranges can be configured for each filter. When the packets match one octet quantity range configured in a filter, the packets are considered to match the filter.
   Maximum number of octets
   destination-port | Start port number | Destination port number range of packets. | A maximum of 32 destination port number ranges can be configured for each filter.
   End port number
   source-port | Start port number | Source port number range of packets. | A maximum of 32 source port number ranges can be configured for each filter.
   End port number

5. Bind a Zone to the filter.
   1. Click the Add Device tab.
   2. Click , select a Zone, and click OK.

      Only the Zones whose Deployment Status is Succeeded are displayed on the page. Ensure that the Zone to be bound has been deployed.

6. Click Deployed.

   - If a Zone is bound to a filter, click Deployed to deploy the filter on the AntiDDoS1820-N for the filter to take effect.
   - If only a filter is created and no Zone is bound, after you click Deployed, the filter configuration is saved in the ATIC. The filter takes effect only after it is bound to a Zone and deployed again.

Parent topic: Configuring a Zone Filter (AntiDDoS1820-N/Netflow Detection)

Copyright © Huawei Technologies Co., Ltd.