3Com 2200 manual Loading Packet Filters, Bridge packetFilter load

12-22 CHAPTER 12: CREATING AND USING PACKET FILTERS

Loading Packet Filters

Top-Level Menu
system			list
ethernet display
			display
fddi	ipFragmentation
			create
➧bridge	ipxSnapTranslation
			delete
ip	addressThreshold
	agingTime		edit
snmp
	stpState	➧load
analyzer
	stpPriority		assign
script
	stpMaxAge unassign
logout
			addressGroup
	stpHelloTime
			portGroup
	stpForwardDelay
	stpGroupAddress
	port

➧packetFilter

When you create packet filters using an external text editor, you must load the filters onto the system from the network host on which you created them. Once loaded, the packet filter definition is converted into the internal format that is used by the packet filter code in the system.

To load a packet filter:

1From the top level of the Administration Console, enter:

bridge packetFilter load

You are prompted for a host IP address, file path name, user name, and password. To use the value in brackets, press [Return] at any prompt.

2Enter the host IP address.

3Enter the path name.

4Enter your user name.

5Enter your password.

The packet filter is loaded onto the Switch 2200.

Any syntax errors in the packet filter definition are reported to you at this time. See Appendix A: Packet Filter Opcodes, Examples, and Syntax Errors for a description of these errors. If errors are detected, you are offered the option of editing the filter definition or terminating the load.

The load might fail if the system has insufficient nonvolatile RAM to store the filter. In this case, an error message tells you that the system did not accept the load.

Assigning Packet To assign a packet filter to one or more ports, the packet filter must reside

Filters to Ports on the system. Each path (transmit all, transmit multicast, receive all, and receive multicast) of a port can have only one packet filter assigned to it; however, you can assign a single packet filter to multiple paths and ports.

Packet filter path assignments

Placing a filter on the transmit path confines the packet to the segment it originated from if it does not meet the forwarding criteria. Placing a filter on the receive path prohibits a packet from accessing certain segments unless