MAC Wildcard Filtering, Series Switch Support | EXP Computer S200

Bridge Filtering

MAC Wildcard Filtering

What Is It?MAC wildcard filtering is an enhancement to the Motorola Network Access Products MAC Filter table. MAC wildcard filtering lets you configure the MAC filter tables and use wildcards “*” to designate numeric pieces of the MAC address.

The MAC Address filter lets you configure a table of MAC Address filters (each filter contains a MAC address which is a string of 12 characters from the range 0-9, A-F). The table is searched for each incoming and outgoing frame on the LAN/WAN link to find a match in the table for the MAC address in the frame.

This enhancement lets you use the wildcard character “*” in any of the 12 character positions while configuring a filter. The wildcard character matches any of the valid characters allowed in a MAC address (0-9, A-F) when it is used to filter a given MAC Address.

MAC wildcard filtering lets you configure a smaller MAC Address Filter table if you configure MAC Address filters where one or more of the 12 character positions can be allowed to take any value in the permissible range.

For example, with the existing functionality, if the Bridge had to be configured to block all the frames with MAC addresses in the range 080004001F00 to 080004001FFF, you would have to configure 256 filters. Now you can simply specify 080004001F**.

PathBuilder S200 PathBuilder S200 series switches support the MAC wildcard feature on the Ethernet.

Series Switch

Support

How MAC Wildcard Figure 34 shows a typical MAC wildcard filtering application:

Filtering works

080004001F05

080004001F04

080004001F01

080004002F01

080004001F02

080004001F03

Figure 34. Example of How MAC Wildcard Filtering Works

With the old filtering system, if you do not want any of the devices shown on the LAN on the left to access the WAN, you would need to configure all five entries. With the MAC wildcard filtering, only one entry is required. For example, you can specify 080004001F** to prevent all devices from accessing the WAN.

Bridging

65

T0008-16F

Release 5.2M

Image 69

EXP Computer S200 manual MAC Wildcard Filtering, Series Switch Support, Filtering works

Contents

3Com Corporation Restricted Rights Legend Restricted Rights Notification for U.S. Government Users Proprietary Material Page Overview SolutionsFunctionality Multiple LANs Bridging TranslationalNo Local Bridging Transparent This Manual Topic This Notice Topic Switches Bridging Features and CapabilitiesIntroduction Bridging Primer Ethernet LAN Ethernet Bridge ExampleOperation WAN application, but you can also bridge across an X.25 WAN Mixed LAN Bridging MAC Addressing LLC2 Local LLC2 Local TerminationTermination LT Example Autolearn for Local Termination Filtering NetBIOS NameMac Address Filtering Spanning Tree Protocol What Is It? Automatic Manual Spanning Tree Support Dual Ethernet LANs Basic Remote Bridging Examples Across a WANWAN or Permanent Virtual Circuit PVC for Frame Relay Example of Bridges in an SVC Arrangement Connections BridgeLAN Interface Support Bridging Interface Connections Between WAN and LAN Setting Up WAN Operation for Bridging Setting Up WAN Operation for Bridging Configure Parameters Bridge ParametersThese parameters make up the Bridge Parameter Record Maximum Number of Bridge Links Stpe Control Bad Hello TimeoutAUTO, MAN MAN Learn Only Period used for Ethernet only Aging Period used for Ethernet onlyBridge WAN Data Priority used for Ethernet only Bridged Protocols Bridge Link Parameters Parameters control the characteristics of this connectionBridge links as links to the networks attached to it Bridge Link Entry Number These parameters make up the Bridge Link RecordBridgeType SR, TB, Bothsrandtb Largest Frame Size Hop Count LimitMAC Address Filter Action NONE, PASS, Block Netbios Name Filter Action Protocol Filter ActionStpe Link State NORMAL,RFC1294, Trans Link ModeNormal Virtual Ring Number Over the WAN LAN Connection TableLAN Connection Table Parameters ROUT, BRID, Brout LAN Forwarder TypeRout LAN Connection Type Codex Encapsulation TypeAutocall Mnemonic Lcon Queue Limit OFF, on Billing RecordsOFF Traffic Priority Limiting Bridge Frame Sizes Where bridging is done remotely across a WANOverview Transmission times for large frames become significant Sizes Standard FrameMaximum frame size Max Frame Size Line Speed Range kbps Configuring Translational Bridging Translational Bridging Example Bridge Frame Handling Configuring Configuring Source Route Bridging OperationNode for SRB Individual Bridge Bridging Procedure Connecting a Station to a Server in Source Route BridgingLAN for a Source Route Bridging operation Located on remote LAN CCC Figure Server’s Destination MAC Address Not on LAN AAA LAN Bridge Link WAN Adapter Transmits Each are Frame Across the WAN Server Responds with Specifically Routed Test Frame Then Step Action Result/Description Transparent Bridging for Ethernet LANs LearningForwarder Forwarder Example LAN link WAN link Link errorStatistics Filtering Hardware Accelerator LAN/WAN HandlersHardware Accelerator Functions Forwarder Functions Forwarder Initialization Aging Learn Only Period Forwarder Database and Spanning Tree Using Filters Frame is dropped Multicast LinkList, the frame is dropped Control menu located in the Main menu TB Forwarding Transparent Bridge Configuration ParametersLocal MAC Address Bridge Link Number Bridge Filtering What is It? How Filtering is Used Parameter Action MAC Address Filtering Parameter Action Value Parameter Process MAC Filtering Example of a Frame Passing on a Bridge Link Mac Filtering Process Incoming and Outgoing Frames Configuring the Bridge Link Record How To Configure ExampleMAC Address Filtering Examples First Example Configuring the MAC Address Filter Table Why it is Important Identifying Address Links for MAC AddressingAddress Links Series Switch Support MAC Wildcard FilteringFiltering works Configuring the MAC Address Filter Table Broadcast frames in the LAN networkCategories Incoming Source Address Link Action These parameters make up the MAC Address Filter TablePASS, BLOCK, PASSLIST, Blocklist Pass Incoming Destination Address Link Action Outgoing Source Address Link Action List of Links Outgoing Destination Address Link Action Protocol Filtering These parameters make up the Protocol Filter Table Record Protocol Filter Protocol SAP hex value Protocol TypeProtocol OUI/IP hex value Protocol Value Outgoing Protocol Link Action Incoming Protocol Link Action Dsap Values Parameter Actions NetBIOS Name Filtering Broadcasts to and from the SVR* name patternTransparent Bridging Forcing a Local Checking NetBIOSDomain With Filters How to Configure Configuring NetBIOS Name FilteringNetBIOS Name Filtering Step Action Step Action Result Select Configure ConfigureEntry Number 1 appears Bridge Bridge Link NetBIOS Name Filter Table Configure NetBIOSBridge -NetBIOS Name Filter Name Filter Table Typical Filtering String TypeAscii Incoming NetBIOS Name List of Links Incoming NetBIOS Name Link Action Outgoing NetBIOS Name List of LInks Outgoing NetBIOS Name Link Action NetBIOS broadcasts filtered on the link NetBIOS Name Filtering StatisticsEach bridge link Check Detailed IBM NetBIOS Formats When to Use NetBIOS Name Filtering NetBIOS Packet FormatsAll of the following are true Either one of the following is true Spanning Tree Protocol Entity Stpe Configuration Stpe Control= Auto Stpe Control = Manual MenuSpanning Tree Tree Bridge Links Spanning Tree Protocol Entity Stpe Stpe Parameter Setting Considerations Example of aBridge Network Setting the Root Bridge Spanning Tree Bridge ID equals Bridge Priority Value in hex + MAC AddressDetermining Root Links Designated Links Type of Network Speed Stpe Path Cost Nature ConsiderExpected Number SVCs Two Bridge Links Between B3 and B4 Spanning Tree Protocol Entity Stpe Timer Parameters Spanning Tree TimersHello Timer Max Age Considerations Other Message Events in Network Bridge Forward Delay Timer Spanning Tree Protocol Entity Stpe Aging Timer Bridges can adjust to the changeLocation and forwards packets to it properly LLC2 Local Termination Preventing session timeouts in a Bridging application Terminal session, causing Well as network delaysBefore Local After Local Supported TopologiesImproper LT Proper LT configuration LLC Protocol LLC Frame Description LLC2 Frame DescriptionType Name Description Local Termination does not spoof Local Termination spoofs Bridging 105 Local Termination Configuring Local Termination Boot Type LLC LT Station StepStation Table Entry Number T2 Rx Ack Timer WAN Parameters T1Reply TimerLocal SAP LLC Profile Name Ti Inactivity Timer Boot Type LLC LT WAN ParametersN3 ACK Delay Count N2 Retry Count Tx Window Size Configuration Entry NumberLCC LT WAN Data Priority HIGH, MEDIUM, LOW T1 Reply Timer 112 Bridging Deleting LT Configuration Records 27x switch, as shown in Figure Mixed LAN OperationMixed LAN Environment Limitations Bridge Link Parameters menu Select Configure BridgeBridge Link Parameters from CTP Main menu, to activate Bridge link Bothsrandtb Dual LAN Ethernet System powerup Supported RoutingDual Ethernet LAN Cmem Parameters For Details on LAN Server Subsystem Alarms Example of LCC Configuring the LSS RecordRecord Virtual Port’s MAC Address Disable ENABLE, DisableVirtual Bridge ID Path Trace Control Statistics Menu screen Bridge Statistics Stpe Status Spanning Tree StatisticsStatus report Term Description State Disabled The Stpe is disabled. If Stpe ControlAre Parameter is MAN Detailed Bridge Link Statistics First Detailed Bridge Link Statistics Screen Terms RIF Link Filter Bridge Link Filter SummarySummary Description Bridging 131 Stats Example Transparent Bridge Forwarding Table StatisticsStats Descriptions Shown in Figure Bridging 133 Terms-Transparent Bridge Second Transparent Bridge Detailed Bridge Link Statistics FF-FF-FF-FF-FF-FF Frame Totals This is a count of the number of framesReceived/transmitted of all types on this link LAN Connection Statistics Statistics MenuDetailed LAN Connection Statistics Detailed LAN Connection Statistics Second Last clear diagnostic code This is the diagnostic code Explains why the last call was clearedConnection and explains why the call was cleared SVCs. The possible states are Blank for PVCs blank Bridging 139 Connection Summary Statistics Example of LAN shows the LAN Connection Summary Statistics Heading Description LLC2 LT Session Summary StatisticsSAP Remote MAC Addr Heading Session Statistics LLC2 LT Detailed Session Statistics Last Statistics Last time statistics were reset Reset Routing information field used in all frames transmittedField, ring number, and bridge number information Heading Description Local Station Session Summary Heading Description Remote Spoofer Session Summary Reset Statistics 148 Bridging Technical Support 3ComFacts Automated Fax Service Access by Analog ModemAccess by Digital Modem Country Data Rate Telephone Number Support from 3ComCountry Telephone Number Country Telephone Number Fax Number Numerics Index LAN OUI URL A-1 Index-5