12-22 CHAPTER 12: CREATING AND USING PACKET FILTERS

Loading Packet Filters

Top-Level Menu

 

 

system

 

 

 

 

 

list

 

 

 

 

 

ethernet display

 

 

 

 

display

fddi

ipFragmentation

 

 

 

 

create

bridge

ipxSnapTranslation

 

 

 

 

delete

ip

addressThreshold

agingTime

edit

snmp

stpState

load

analyzer

stpPriority

assign

script

stpMaxAge unassign

logout

 

 

 

 

addressGroup

 

 

 

 

 

 

 

 

stpHelloTime

 

 

 

 

 

 

portGroup

 

 

stpForwardDelay

 

 

stpGroupAddress

 

 

port

 

 

packetFilter

When you create packet filters using an external text editor, you must load the filters onto the system from the network host on which you created them. Once loaded, the packet filter definition is converted into the internal format that is used by the packet filter code in the system.

To load a packet filter:

1From the top level of the Administration Console, enter:

bridge packetFilter load

You are prompted for a host IP address, file path name, user name, and password. To use the value in brackets, press [Return] at any prompt.

2Enter the host IP address.

3Enter the path name.

4Enter your user name.

5Enter your password.

The packet filter is loaded onto the Switch 2200.

Any syntax errors in the packet filter definition are reported to you at this time. See Appendix A: Packet Filter Opcodes, Examples, and Syntax Errors for a description of these errors. If errors are detected, you are offered the option of editing the filter definition or terminating the load.

The load might fail if the system has insufficient nonvolatile RAM to store the filter. In this case, an error message tells you that the system did not accept the load.

Assigning Packet To assign a packet filter to one or more ports, the packet filter must reside

Filters to Ports on the system. Each path (transmit all, transmit multicast, receive all, and receive multicast) of a port can have only one packet filter assigned to it; however, you can assign a single packet filter to multiple paths and ports.

Packet filter path assignments

Placing a filter on the transmit path confines the packet to the segment it originated from if it does not meet the forwarding criteria. Placing a filter on the receive path prohibits a packet from accessing certain segments unless

Page 159
Image 159
3Com 2200 manual Loading Packet Filters, Bridge packetFilter load