Cabletron Systems SSIM-R8-02 Spécifications Page 321

  • Télécharger
  • Ajouter à mon manuel
  • Imprimer
  • Page
    / 394
  • Table des matières
  • DEPANNAGE
  • MARQUE LIVRES
  • Noté. / 5. Basé sur avis des utilisateurs
Vue de la page 320
Enterasys Xpedition User Reference Manual 301
Layer-2 Security Filters
Configuring Layer-2 Port-to-Address Lock Filters
Port address lock filters allow you to bind or lock specific source MAC addresses to a
port or set of ports. Once a port is locked, only the specified source MAC address is
allowed to connect to the locked port and the specified source MAC address is not
allowed to connect to any other ports.
To configure Layer-2 port address lock filters, enter the following commands in Configure
mode:
Configuring Layer-2 Static Entry Filters
Static entry filters allow or force traffic to go to a set of destination ports based on a
frame's source MAC address, destination MAC address, or both source and destination
MAC addresses in flow bridging mode. Static entries are always configured and applied
at the input port. You can set the following static entry filters:
Source static entry, which specifies that any frame coming from source MAC address
will be allowed or disallowed to go to a set of ports
Destination static entry, which specifies that any frame destined to a specific
destination MAC address will be allowed, disallowed, or forced to go to a set of ports
Flow static entry, which specifies that any frame coming from a specific source MAC
address that is destined to specific destination MAC address will be allowed,
disallowed, or forced to go to a set of ports
To configure Layer-2 static entry filters, enter the following commands in Configure
mode:
Configure a port address lock filter.
filters add port-address-lock name <name> source-
mac
<MACaddr> vlan <VLAN-num> in-port-
list
<port-list>
Configure a source static
entry filter.
filters add static-entry name <name> restriction
allow|disallow|force source-mac
<MACaddr> source-
mac-mask
<mask> vlan <VLAN-num> in-port-list
<port-list> out-port-list
<port-list>
Configure a destination static
entry filter.
filters add static-entry name <name> restriction
allow|disallow|force dest-mac
<MACaddr> dest-mac-
mask
<mask> vlan <VLAN-num> in-port-list <port-
list>
out-port-list <port-list>
Vue de la page 320
1 2 ... 316 317 318 319 320 321 322 323 324 325 326 ... 393 394

Commentaires sur ces manuels

Pas de commentaire