Cabletron Systems 9032578-05 manual Configuring Layer-2 Port-to-Address Lock Filters, Entry filter

Chapter 20: Security Configuration Guide

Configuring Layer-2 Port-to-Address Lock Filters

Port address lock filters allow you to bind or “lock” specific source MAC addresses to a port or set of ports. Once a port is locked, only the specified source MAC address is allowed to connect to the locked port and the specified source MAC address is not allowed to connect to any other ports.

To configure Layer-2 port address lock filters, enter the following commands in Configure mode:

Configure a port address lock filter.

filters add port-address-lock name

<name> source-mac<MACaddr> vlan <VLAN-num> in-port-list<port-list>

Configuring Layer-2 Static Entry Filters

Static entry filters allow or force traffic to go to a set of destination ports based on a frame's source MAC address, destination MAC address, or both source and destination MAC addresses in flow bridging mode. Static entries are always configured and applied at the input port. You can set the following static entry filters:

•Source static entry, which specifies that any frame coming from source MAC address will be allowed or disallowed to go to a set of ports

•Destination static entry, which specifies that any frame destined to a specific destination MAC address will be allowed, disallowed, or forced to go to a set of ports

•Flow static entry, which specifies that any frame coming from a specific source MAC address that is destined to specific destination MAC address will be allowed, disallowed, or forced to go to a set of ports

To configure Layer-2 static entry filters, enter the following commands in Configure mode:

Configure a source static	filters add static-entry name <name>
entry filter.	restriction allowdisallowforce source-
	mac <MACaddr> source-mac-mask <mask>
	vlan <VLAN-num>in-port-list <port-
	list> out-port-list <port-list>
Configure a destination static	filters add static-entry name <name>
entry filter.	restriction allowdisallowforce dest-
	mac <MACaddr> dest-mac-mask <mask> vlan
	<VLAN-num> in-port-list<port-list> out-
	port-list<port-list>

SmartSwitch Router User Reference Manual 281