Secure the SRB Network

To enable filtering on input or output, use one of the following commands in interface configuration mode:

Command

Purpose

source-bridge input-lsap-list access-list-number

Enable filtering of IEEE

 

802-encapsulated packets on input by

 

type code.

 

 

source-bridge output-lsap-list access-list-number

Enable filtering of IEEE

 

802-encapsulated packets on output

 

by type code.

 

 

You can filter SNAP-encapsulated packets on either input or output. The access list you specify is the one you created that includes the protocol type codes.

To enable filtering on input or output, use one of the following commands in interface configuration mode:

Command

Purpose

source-bridge input-type-list access-list-number

Filter SNAP-encapsulated packets on

 

input by type code.

 

 

source-bridge output-type-list access-list-number

Filter SNAP-encapsulated frames on

 

output by type code.

 

 

Filter Frames by Vendor Code

To configure administrative filters by vendor code or address, define access lists that look for Token Ring addresses or for particular vendor codes for administrative filtering. To do so, use the following command in global configuration mode:

Purpose

Command

access-listaccess-list-number {permit deny} address

Configure vendor code access lists.

mask

 

 

 

Filter Source Addresses

To configure filtering on IEEE 802 source addresses, assign an access list to a particular input interface for filtering the Token Ring or IEEE 802 source addresses. To do so, use the following command in interface configuration mode:

Command

Purpose

source-bridge input-address-list access-list-number

Enable filtering on IEEE 802 source

 

addresses.

 

 

Filter Destination Addresses

To configure filtering on IEEE 802 destination addresses, assign an access list to a particular output interface. To do so, use the following command in interface configuration mode:

Command

Purpose

source-bridge output-address-list access-list-number

Enable filtering on IEEE 802

 

destination addresses.

 

 

BC-136Bridging and IBM Networking Configuration Guide

Page 28
Image 28
Cisco Systems BC-109 manual Filter Frames by Vendor Code, Filter Source Addresses, Filter Destination Addresses