Allied Telesis AT-GS950/48PS, AT-S111 manual Destination MAC Filter

AT-GS950/48PS Switch Web Interface User’s Guide

Destination MAC Filter

Overview

Destination MAC

Filter

Configuration

This section contains an explanation of the Destination MAC Filter feature as well a procedure for configuring it. This section includes the following information:

“Overview” on page 279

“Destination MAC Filter Configuration” on page 279

“Delete Destination MAC Filter” on page 280

The Destination MAC Filter feature prevents the AT-GS950/48PS switch from forwarding packets to a specified device. On the Destination MAC Filter Page of the AT-S111 Management software, enter the MAC address of the device that you want to filter.

After the switch receives a packet, it examines the destination MAC address of the packet. If the destination MAC address matches a MAC address set in the filter, the software prevents the switch from forwarding it and drops the packet.

You may want to block access to a device within your organization. For instance, you may not want users on the Sales group switch to have access to a server on the Accounting group switch. You can enter the MAC address of the Accounting server as a destination MAC address filter on the Sales group switch. When a packet destined for the Accounting server is received by the Sales group switch, the switch drops the packet.

The Destination MAC Filter is a subset of the static MAC address. For more information about MAC addresses, see Chapter 10, “Overview” on page 124.

To set MAC address in the Destination MAC Filter, perform the following procedure:

1.From the main menu on the left side of the page, select the Security folder.

The Security folder expands.

2.From the Security folder, select Destination MAC Filter.

The Destination MAC Filter Page is displayed. See Figure 112 on page 280.

279