Cabletron Systems CSX1200, CSX1000 manual Workgroup Remote Access Switch

CONFIGURING ADVANCED BRIDGING

Bridge Filters

5.PROTOCOL protocol-Id FORWARD < distribution list >

This filter allows you to restrict packets based on the Ethernet protocol Id field or the corresponding 802.3 LSAP field. You can specify the protocol Id that is to be forwarded. The filtering mechanism will determine if the packet is Ethernet format or 802.3 format. The Ethernet type or LSAP field will be checked based on packet format.

6.PROTOCOL protocol-Id CONNECT < distribution list >

This filter allows you to restrict packets based on the Ethernet protocol Id field or the corresponding 802.3 LSAP field. You can specify the protocol Id that is to be connected and then forwarded. The filtering mechanism will determine if the packet is Ethernet format or 802.3 format. The Ethernet type or LSAP field will be checked based on packet format. See the section titled Protocol Definitions for more information.

7.PACKET OFFSET dd MASK xxxxxxxxxxxx VALUE xxxxxxxxxxxx FORWARD

<distribution-list>

This filter allows you to restrict packets based on packet data outside the source and destination MAC addresses or protocol Id. For example, you may wish to filter packets based on IP address information. You would then specify the offset (dd) into the MAC frame where the filter comparison is to begin. The mask data indicates which bits within the frame data are significant and will be compared to the value. The frame data is logically “anded” with the mask, and then compared to the specified value. The value field must be a subset of the mask field. That is, the value field logically “anded” with the mask field must equal the value field. The value and mask fields must have equal lengths.

8.PACKET OFFSET dd MASK xxxxxxxxxxxx VALUE xxxxxxxxxxxx CONNECT <distribution-list>

This filter allows you to restrict packets based on packet data outside the source and destination MAC addresses or protocol Id. For example, you may wish to filter packets based on IP address information. You would then specify the offset (dd) into the MAC frame where the filter comparison is to begin. The mask data indicates which bits within the frame data are significant and will be compared to the value. The frame data is logically “anded” with the mask, and then compared to the specified value. The value field must be a subset of the mask field. That is, the value field logically “anded” with the mask field must equal the value field. The value and mask fields must have equal lengths.

9.PACKET OFFSET dd MASK xxxxxxxxxxxx VALUE xxxxxxxxxxxx DISCARD <distribution- list>

This filter allows you to specify the DISCARD filter action on a packet data filter. This gives you the flexibility of allowing a global class of data to be forwarded, and restrict specific subsets of that data. For example you may forward all IPX data packets but restrict workstation watchdog packets.

Workgroup Remote Access Switch 231