Cabletron Systems SmartSwitch manual Monitoring Layer-2 Security Filters

Chapter 18: Security Configuration Guide

•Combine a destination secure port filter with a flow static entry to drop all received traffic but allow any frame coming from specific source MAC address that is destined to specific destination MAC address to go through

To configure Layer-2 secure port filters, enter the following commands in Configure mode:

Configure a source secure port	filters add secure-port name <name>
filter.	direction source vlan <VLAN-num>
	in-port-list <port-list>
Configure a destination secure	filters add secure-port name <name>
port filter.	direction destination vlan <VLAN-num>
	in-port-list <port-list>

Monitoring Layer-2 Security Filters

The SSR provides display of Layer-2 security filter configurations contained in the routing table.

To display security filter information, enter the following commands in Enable mode.

Show address filters.	filters show address-filter
	[all-sourceall-destinationall-flow]
	[source-mac <MACaddr> dest-mac <MACaddr>]
	[ports <port-list>] [vlan <VLAN-num>]
Show port address lock	filters show port-address-lock ports
filters.	[ports <port-list>] [vlan <VLAN-num>]
	[source-mac <MACaddr>]
Show secure port filters.	filters show secure-port
Show static entry filters.	filters show static-entry
	[all-sourceall-destinationall-flow]
	ports <port-list> vlan <VLAN-num>
	[source-mac <MACaddr> dest-mac <MACaddr>]

278 SmartSwitch Router User Reference Manual