ProCurve 3400cl Technical Information Page 189
- Page / 314
- Table of contents
- BOOKMARKS
Rated. / 5. Based on customer reviews
Traffic/Security Filters
Configuring Traffic/Security Filters
Configuring a Source-Port Traffic Filter
Syntax: [no] filter
[source-port < port-number | trunk-name>]
Specifies one inbound port or trunk. Traffic received
inbound on this interface from other devices will be
filtered. The no form of the command deletes the source-
port filter for < port-number > and returns the destination
ports for that filter to the
Forward action. (Default:
Forward on all ports.)
Note: If multiple VLANs are configured, the source-port
and the destination port(s) must be in the same VLAN
unless routing is enabled. Similarly, if a VLAN con-
taining both the source and destination is multinetted,
the source and destination ports and/or trunks must be
in the same subnet unless routing is enabled.
[ drop ] < destination-port-list > [ forward < port-list >]
Configures the filter to drop traffic for the ports and/or
trunks in the designated < destination-port-list >. Can be
followed by forward < destination-port-list > if you have
other destination ports set to drop that you want to
change to forward. If no drop or forward action is
specified, the switch automatically creates a filter with
a forward action from the designated source port (or
trunk) to all destination ports (or trunks) on the switch.
[ forward ] < port-list >
Configures the filter to forward traffic for the ports and/
or trunks in the designated < destination-port-list >.
Because forward is the default state for destinations in
a filter, this command is useful when destinations in
an existing filter are configured for drop and you want
to change them to forward. Can be followed by drop <
destination-port-list > if you have other destination ports
set to forward that you want to change to drop. If no drop
or forward action is specified, the switch automatically
creates a filter with a forward action from the desig-
nated source port (or trunk) to all destination ports (or
trunks) on the switch.
8-9
- Access Security Guide 1
- HP ProCurve 1
- Series 5300xl Switches 1
- Series 3400cl Switches 1
- HP Procurve 3
- 4 TACACS+ Authentication 7
- 8 Traffic/Security Filters 9
- Contents 10
- 12 Key Management System 12
- Getting Started 13
- Introduction 14
- Guideline 16
- Command Syntax Conventions 17
- Simulating Display Output 18
- Related Publications 19
- Sources for More Information 22
- Need Only a Quick Start? 23
- Network 23
- Menu: Setting Passwords 29
- Front-Panel Security 32
- When Security Is Important 33
- Front-Panel Button Functions 34
- Reset Button 35
- Password Recovery 42
- [Y] (for “Yes”) 43
- [N] (for “No”) 43
- Password Recovery Process 44
- Web and MAC Authentication 45
- Client Options 47
- General Features 48
- Operate 49
- MAC-based Authentication 51
- Operating Rules and Notes 54
- RADIUS Server 58
- Based Authentication 70
- Client Status 73
- Terminology Used in TACACS 77
- Applications: 77
- General System Requirements 79
- Note on 81
- Privilege Levels 81
- Caution 81
- BeforeYou Begin 82
- Configuration 83
- Caution Regarding 87
- Login Primary 87
- Encryption Keys 90
- First-Choice TACACS+ Server 92
- How Authentication Operates 94
- Using the Encryption Key 97
- Access When Using TACACS+ 98
- Messages Related to TACACS+ 99
- TACACS+ Authentication 100
- Operating Notes 100
- Overview 102
- Terminology 103
- Authentication 106
- Want RADIUS To Protect 108
- The switch now 109
- SSH authentication 109
- Local Authentication Process 115
- Access When Using RADIUS 116
- ■ IP address: 10.33.18.151 120
- ■ Start-Stop: 122
- ■ Stop-Only: 122
- Viewing RADIUS Statistics 124
- RADIUS Accounting Statistics 127
- Prerequisite for Using SSH 135
- Public Key Formats 135
- Operation 139
- Host Public 142
- Key for the 142
- Bit Size 143
- Exponent <e> 143
- Modulus <n> 143
- Client Contact Behavior 145
- ■ Execute no ip ssh 146
- Public-Key Authentication 152
- Bit Size Exponent <e> 153
- Comment 153
- Key Index Number 155
- Prerequisite for Using SSL 163
- Password Button 166
- Security Tab 166
- Generate New Key 169
- Enter certificate Arguments 169
- Generate New Certificate 169
- [SSL] button 172
- Current SSL Host Certificate 173
- Browser Contact Behavior 175
- Enable SLL 178
- Common Errors in SSL setup 179
- Traffic/Security Filters 181
- Filter Types and Operation 183
- Source-Port Filters 184
- Example 185
- Forward action. (Default: 189
- Editing a Source-Port Filter 191
- (5300xl Switches Only) 192
- Filter Indexing 193
- (802.1x) 197
- How 802.1x Operates 201
- as defined in the 204
- 802.1x standard 204
- Access Control (802.1x) 207
- Authenticators 210
- 802.1x Open VLAN Mode 216
- Unauthorized-Client VLANs 220
- 802.1x Devices 227
- Blocking a 228
- Non-802.1x 228
- Other Switches 229
- Statistics, and Counters 233
- ■ The switch reboots 238
- After the 802.1x session 242
- < port-number >: 243
- Port Security 247
- Trunk Group Exclusion 249
- Planning Port Security 250
- Configuring Port Security 254
- MAC Lockdown 264
- MAC Lockdown Operating Notes 267
- Deploying MAC Lockdown 268
- MAC Lockout 272
- Security Features 275
- Alert Flags 275
- Send-Disable 277
- Resetting Alert Flags 278
- Using Authorized IP Managers 285
- Options 287
- Access Levels 287
- Stations 288
- Managers 289
- Building IP Masks 293
- IP Entry 294
- Key Management System 299
- Numerics 307
- 2 – Index 308
- Index – 3 309
- 4 – Index 310
- Index – 5 311
- 6 – Index 312
- 5990-6052 314
Related products and manuals for Network switches ProCurve 3400cl
Network switches ProCurve 8200zl Specifications
(144 pages)
(144 pages)
© 2020, manymanuals.com. All rights reserved. | 0.937 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals