ProCurve 6200yl User's Guide download pdf (Page 433)

100

101

12-5

Traffic/Security Filters and Monitors

Filter Types and Operation

■ When you create a source port filter, all ports and port trunks (if any)

on the switch appear as destinations on the list for that filter, even if

routing is disabled and separate VLANs and/or subnets exist. Where

traffic would normally be allowed between ports and/or trunks, the

switch automatically forwards traffic to the outbound ports and/or

trunks you do not specifically configure to drop traffic. (Destination

ports that comprise a trunk are listed collectively by the trunk name—

such as Trk1— instead of by individual port name.)

■ Packets allowed for forwarding by a source-port filter are subject to

the same operation as inbound packets on a port that is not configured

for source-port filtering.

■ With multiple IP addresses configured on a VLAN, and routing

enabled on the switch, a single port or trunk can be both the source

and destination of packets moving between subnets in that same

VLAN. In this case, you can prevent the traffic of one subnet from

being routed to another subnet of the same port by configuring the

port or trunk as both the source and destination for traffic to drop.

Example

If you wanted to prevent server “A” from receiving traffic sent by workstation

“X”, but do not want to prevent any other servers or end nodes from receiving

traffic from workstation “X”, you would configure a filter to drop traffic from

port 5 to port 7. The resulting filter would drop traffic from port 5 to port 7,

but would forward all other traffic from any source port to any destination

port. (Refer to figures 12-2 and 12-3.

Figure 12-2. Example of a Filter Blocking Traffic only from Port 5 to Server "A"

Switch

Server "A"

Port 7

Port 8

Server "B"

Port 9

Server "C"

Port 5

Workstation " X"

1 2 ... 428 429 430 431 432 433 434 435 436 437 438 ... 595 596

Comments to this Manuals

No comments

ProCurve 6200yl User's Guide Page 433

Comments to this Manuals

Related products and manuals for Network switches ProCurve 6200yl