ProCurve 6200yl User's Guide download pdf (Page 431)

100

101

12-3

Traffic/Security Filters and Monitors

Filter Types and Operation

You can enhance in-band security and improve control over access to network

resources by configuring static filters to forward (the default action) or drop

unwanted traffic. That is, you can configure a traffic filter to either forward

or drop all network traffic moving to outbound (destination) ports and trunks

(if any) on the switch.

Filter Limits

The switch accepts up to 101 static filters. These limitations apply:

■ Source-port filters: up to 78

■ Multicast filters: up to 16 with 1024 or fewer VLANs configured. Up to 8

with more than 1024 VLANs configured.

■ Protocol filters: up to 7

Using Port Trunks with Filters

The switch manages a port trunk as a single source or destination for source-

port filtering. If you configure a port for filtering before adding it to a port

trunk, the port retains the filter configuration, but suspends the filtering action

while a member of the trunk. If you want a trunk to perform filtering, first

configure the trunk, then configure the trunk for filtering. Refer to “Config-

uring a Filter on a Port Trunk” on page 12-19.

Filter Types and Operation

Table 12-1. Filter Types and Criteria

Static Filter

Type

Selection Criteria

Source-Port Inbound traffic from a designated, physical source-port will be forwarded or

dropped on a per-port (destination) basis.

Multicast Inbound traffic having a specified multicast MAC address will be forwarded to

outbound ports (the default) or dropped on a per-port (destination) basis.

Protocol Inbound traffic having the selected frame (protocol) type will be forwarded or

dropped on a per-port (destination) basis.

1 2 ... 426 427 428 429 430 431 432 433 434 435 436 ... 595 596

Comments to this Manuals

No comments

ProCurve 6200yl User's Guide Page 431

Comments to this Manuals

Related products and manuals for Network switches ProCurve 6200yl