Perle Systems IOLINK-520 manual Programmable Filtering

Page 69

Programmable Filtering

2From the CONFIGURATION MENU, enter an 8.

This will place you at the FILTER SET-UP MENU, where access to the individual filtering menus is obtained.

3From the FILTER SET-UP MENU, enter a 1.

This will place you at the MAC ADDRESS FILTERS MENU, where access to the MAC Address filters is obtained.

4From the MAC ADDRESS FILTERS MENU, make sure that the Filter Operation is currently set to “negative.”

This will cause the MAC Address Filters specified to be used for forwarding frames with the specified MAC addresses.

5At this menu, enter a 1.

This will place you at the first EDIT MAC ADDRESS FILTER MENU screen. At the prompt enter the MAC address for which you want to specify the filter.

6Enter the 12-digit Ethernet address of the Personal Computer system in the following format: 010203040506 (enter a Return)

The edit screen will fill in the information that the table knows about this address. For this example, let us assume that it knows that the address status is [not present] and is of [unknown] location.

In this example, the bridge/router is not aware of this station yet. The station has probably not been active for the bridge/router to “learn” any information about it.

Therefore, you will have to tell the bridge/router a little bit more about the station.

7Enter a 2 to enter the location of the station.

8The bridge/router will prompt you for the LAN that the station is located on; enter the name of this bridge/router’s LAN (LAN456789 for example).

Note that the Status of the address is marked as [present], the location is updated to LAN456789 and the Permanent entry is [enabled].

9Enter a 3 to [enable] the “Forward if Source” parameter. The edit screen will be updated to show the new information.

At this point, the address is added to the permanent filter table of the local LAN. This entry, therefore, will not be subject to the aging timer, and will remain active until it is removed from the permanent entry table.

When a frame of information is seen on the local LAN that contains the address of the Personal Computer in the source field of the frame, the bridge/router will forward it. All other frames seen on the local LAN that are destined for the remote LAN will be filtered.

Most programmable filtering options may be used for security purposes. The examples above are specific instances where the two “Forward if” functions may be used. Filter masks are presented in subsequent pages of this section.

B.6 IOLINK-PRO & 520 Reference Manual

Image 69
Contents Reference Manual IP Routing and the IOLINK-PRO & 520 Routers IOLINK-PRO & 520 RoutersARP-Address Resolution Protocol Proxy ARPComplete IP Connection IOLINK-PRO & 520 Reference Manua Protocol IP Header DetailsTime to live Header ChecksumOptions Icmp MessagesUnreachable RedirectTime and Mask server PingUpdate Mechanism RIP-Routing Information ProtocolRoute Tables IPX Addressing IPX Routing and The IOLINK-PRO & 520 RoutersNetwork Layer Addressing vs. MAC Addressing IPX Address FormatIPX Header Other IPX Header InformationService Advertisement Protocol Establishing an IPX ConnectionSAP Broadcasts Routing Information Protocol Server TypesSAP Requests RIP/X OperationBridging and the IOLINK-PRO & 520 Routers RIP/X RequestsRIP/X Metrics Station Address Learning Initial Bridging ProcessAddress Purging Aging TimerAging Exception Filled Address TableIolink Router Feature Definitions TelnetLink Compression Introduction Bandwidth On Demand WAN TopologiesPoint-to-Point MultipointTime of Day Connect Application Disaster Recovery Backup Link Operating Software UpgradesIsdn Single Active Link & Dual Active Link Iolink PRO & 520 Isdn Connection Management Wide Area Network Topologies SupportedCall Establishment Methods Auto-Call Time-of-Day Connections Isdn Connection ManagementManual Call Address ConnectCombination Connection ProcessProtocol Awareness Idle TimerSuspension Process Interesting TrafficTermination Process Session Keepalive MessagesIP Address Connect IP SpecificsSuspension of TCP/IP Sessions RIP-Routing Information ProtocolRIP/IPX and SAP/IPX IPX SpecificsSuspension of IPX Sessions IPX Serialization FramesPinout Information Module IdentificationLink Clocking Information Link Interfaces Reference ATL CSU/DSU Link Module InformationConsole Pinouts T1/E1 Module CSU/DSU ModuleRS232 Link Pinouts 24 & RS232C Link PinoutsDB15 Female DTE Direction Contact Circuits From Number 11 & X.21 Link PinoutsDB25 Female DTE Direction Contact Circuit From Number Name RS442 & RS530 Link PinoutsLink Pinouts DB25Number Name 11 RS232 Null-Modem Cable RS232 Null-Modem Cable Configuration12 V.35 Null-Modem Cable Null-Modem Cable Configuration13 RS530 Null-Modem Cable RS530 Null-Modem Cable Configuration14 RS530 to RS449 Conversion Cable RS530 To RS449 Conversion Cable15 V.11/X.21 Null-Modem Cable 11/X.21 Null-Modem Cable ConfigurationWAN Link Control-Signal Operation Event logs Appendix a Event LogsEvent Logs IOLINK-PRO & 520 Reference Manual A.3 Event Logs IOLINK-PRO & 520 Reference Manual A.5 Event Logs IOLINK-PRO & 520 Reference Manual A.7 Event Logs Alarm Logs Event Logs IOLINK-PRO & 520 Reference Manual A.11 Event Logs IOLINK-PRO & 520 Reference Manual A.13 Event Logs IOLINK-PRO & 520 Reference Manual A.15 Event Logs IOLINK-PRO & 520 Reference Manual A.17 Event Logs IOLINK-PRO & 520 Reference Manual A.19 PPP Security Logs Security MAC Address FilteringSecurity-Filter if Destination Programmable FilteringSecurity-Filter if Source Security-Forward if Destination Security-Forward if Source Programmable Filtering Pattern Filter Operators Bridge Pattern FilteringProtocol Discrimination Internet Protocol IP Protocol Type FieldFilter all IP Packets IP, and no moreFilter only TCP/IP Transport Control Protocol / Internet Protocol TCP/IPFilter all IP without TCP traffic Filter all except TCP/IPFilter all DEC Bandwidth ConservationEthernet Broadcasting Ethernet MulticastingGeneral Restrictions Internet AddressesEthernet Station Addresses Mask would be 6-010203040506&12-0800&23-06 Example Mask CombinationsIPX Router Pattern Filtering IP Router Pattern FilteringPage Appendix C Frame Formats Octet Locations on an IP Routed TCP/IP Frame IOLINK-PRO & 520 Reference Manual C.3