Cisco Systems IC-23 manual Defining Packet Filters, IC-51

Page 29

Configuring LAN Interfaces

Configuring a LAN Extender Interface

Note Do not configure the MTU to a value other than the default value when you are configuring a LAN Extender interface.

Defining Packet Filters

You can configure specific administrative filters that filter frames based on their source MAC address. The LAN Extender forwards packets between a remote LAN and a core router. It examines frames and transmits them through the internetwork according to the destination address, and it does not forward a frame back to its originating network segment.

You define filters on the LAN Extender interface in order to control which packets from the remote Ethernet LAN are permitted to pass to the core router (see Figure 7). These filters are applied only on traffic passing from the remote LAN to the core router. Filtering on the LAN Extender interface is actually performed in the LAN Extender, not on the core router. This means that the filtering is done using the LAN Extender CPU, thus offloading the function from the core router. This process also saves bandwidth on the WAN, because only the desired packets are forwarded from the LAN Extender to the core router. Whenever possible, you should perform packet filtering on the LAN Extender.

Figure 7 Packet Filtering on the LAN Extender

Other networks

 

 

 

 

 

 

 

Remote

 

 

 

 

 

 

 

 

Packet flow

LAN Extender

Ethernet

 

LAN

 

 

Core router

 

 

Packet filters

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Filters applied by lex

S2981

 

 

input-type-list commands

 

 

input-address-list and lex

 

You can also define filters on the core router to control which packets from the LAN Extender interface are permitted to pass to other interfaces on the core router (see Figure 8). You do this using the standard filters available on the router. This means that all packets are sent across the WAN before being filtered and that the filtering is done using the core router’s CPU.

Figure 8 Packet Filtering on the Core Router

Filters applied by standard

router input filters

LEX Input packet filters

Packet flow

Packet flow Core router LEX Output packet filters

Filters applied by standard

router output filters

LAN Extender

S2982

Cisco IOS Interface Configuration Guide

IC-51

Image 29
Contents IC-23 Configuring an Ethernet or Fast Ethernet InterfaceIC-24 Ethernet and Fast Ethernet Interface Configuration Task ListIC-25 Specifying an Ethernet or Fast Ethernet InterfaceSpecifying an Ethernet Encapsulation Method IC-26 Specifying the Media and Connector TypeSpecifying Full-Duplex Operation IC-27 Configuring Fast Ethernet 100BASE-TExtending the 10BASE-T Capability IC-28 Configuring PA-12E/2FE Port AdapterIC-29 Configuring the PA-12E/2FE Port AdapterIC-30 IC-31 Monitoring and Maintaining the PA-12E/2FE Port AdapterIC-32 IC-33 Configuring Fast EtherChannelConfiguring the 100VG-AnyLAN Port Adapter IC-34 Fast EtherChannel Configuration Task ListIC-35 Configuring the Port-Channel InterfaceIC-36 Configuring the Fast Ethernet InterfacesIC-37 Configuring a Fiber Distributed Data InterfaceIC-38 Using Connection Management InformationIC-39 Fddi Configuration Task ListSpecifying a Fddi IC-40 Enabling Full-Duplex Mode on the FddiEnabling Fddi Bridging Encapsulation Setting the Transmission Valid Timer Setting the Token Rotation TimeControlling the Transmission Timer Modifying the C-Min TimerModifying the Fddi Timeout Timer Modifying the TB-Min TimerSetting the Bit Control Controlling SMT Frame ProcessingControlling the CMT Microcode Setting Fddi Frames Per Token LimitStarting and Stopping Fddi IC-43Controlling the Fddi SMT Message Queue Size Configuring a Hub InterfacePreallocating Buffers for Bursty Fddi Traffic IC-44Disabling or Enabling Automatic Receiver Polarity Reversal Enabling a Hub PortDisabling or Enabling the Link Test Function IC-45IC-46 Enabling Source Address ControlEnabling Snmp Illegal Address Trap Connecting a LAN Extender to a Core Router Configuring a LAN Extender InterfaceExpanded View of the Connection to a Core Router IC-47Discovering the MAC Address Installing a LAN Extender at a Remote SiteUpgrading Software for the LAN Extender Management of the LAN Extender InterfaceIC-49 Configuring the LAN ExtenderIC-50 LAN Extender Interface Configuration Task ListConfiguring and Creating a LAN Extender Interface IC-51 Defining Packet FiltersIC-52 Filtering by MAC Address and Vendor CodeIC-53 Controlling Priority QueueingIC-54 Controlling the Sending of Commands to the LAN ExtenderIC-55 Restarting the LAN ExtenderDownloading a Software Image to the LAN Extender IC-56 Troubleshooting the LAN ExtenderIC-57 System OKIC-58 Configuring a Token Ring InterfaceDedicated Token Ring Port Adapter Token Ring Interface Configuration Task ListSpecifying a Token Ring Interface Enabling Early Token ReleaseConfiguring PCbus Token Ring Interface Management LAN Interface Configuration ExamplesEnabling Token Ring Concentrator Port Monitoring and Maintaining the PortFull Duplex Enablement Operation Example Ethernet Encapsulation Enablement ExamplePA-12E/2FE Port Configuration Examples IC-61IC-62 PA-VG100 Port Adapter Configuration ExampleIC-63 Fast EtherChannel Configuration ExamplesIC-64 Fddi Frames Configuration ExampleHub Port Startup Examples Hub Configuration ExamplesHub Port Shutdown Examples IC-65LAN Extender Interface Access List Examples LAN Extender Enablement Interface ExampleSnmp Illegal Address Trap Enablement for Hub Port Example MAC Address Filtering ExampleIC-67 Ethernet Type Code Filtering ExampleIC-68

IC-23 specifications

Cisco Systems IC-23 is a robust networking device designed to address the ever-evolving demands of modern enterprises. As part of Cisco's extensive portfolio, the IC-23 serves as an ideal solution for organizations seeking to enhance their network performance, reliability, and scalability.

One of the standout features of the Cisco IC-23 is its high-speed connectivity options. With support for both wired and wireless communications, this device can seamlessly integrate into a wide range of network architectures. It offers multiple Gigabit Ethernet ports, enabling rapid data transfer and facilitating the connection of numerous devices without compromising performance.

Another key characteristic of the IC-23 is its advanced security protocols. Data breaches and cyber threats are persistent concerns in today's digital landscape, and Cisco addresses these challenges head-on with robust security measures. The IC-23 incorporates features such as firewall capabilities, intrusion detection systems, and secure VPN support, ensuring that sensitive information remains protected while traversing the network.

The IC-23 also leverages Cisco's renowned software-defined networking (SDN) capabilities. This technology allows businesses to manage their network resources dynamically, ensuring optimal performance based on real-time demands. As a result, organizations can easily adjust their network configurations to meet fluctuating workloads, enhancing both efficiency and cost-effectiveness.

Scalability is another critical feature of the IC-23, making it an excellent choice for growing companies. Cisco has designed this device to accommodate increasing data traffic without necessitating a complete overhaul of existing infrastructure. This adaptability ensures that organizations can expand their networks smoothly as their operations evolve.

Moreover, the IC-23 supports a variety of network management tools, providing IT teams with the insights needed to monitor performance and troubleshoot issues proactively. Cisco's user-friendly interface simplifies the process of network management, allowing administrators to optimize resources and maintain continuous uptime.

In conclusion, Cisco Systems IC-23 stands out as a highly capable networking solution tailored for modern enterprises. With its high-speed connectivity, comprehensive security features, SDN capabilities, scalability, and intuitive management tools, the IC-23 is well-equipped to meet the demands of today’s digital environments. As organizations continue to navigate the complexities of the digital age, the IC-23 prepares them to thrive in an increasingly interconnected world.