HP ProCurve W.14.03 Filter Limits, Filter Types and Operation, Using Port Trunks with Filters, Table 11-1.Filter Types and Criteria

Traffic/Security Filters and Monitors

Filter Types and Operation

You can enhance in-band security and improve control over access to network resources by configuring static filters to forward (the default action) or drop unwanted traffic. That is, you can configure a traffic filter to either forward or drop all network traffic moving to outbound (destination) ports and trunks (if any) on the switch.

Filter Limits

The switch accepts up to 101 static filters. These limitations apply:

■Source-port filters: up to 78

■Multicast filters: up to 16 with 1024 or fewer VLANs configured. Up to 8 with more than 1024 VLANs configured.

■Protocol filters: up to 7

Using Port Trunks with Filters

The switch manages a port trunk as a single source or destination for source- port filtering. If you configure a port for filtering before adding it to a port trunk, the port retains the filter configuration, but suspends the filtering action while a member of the trunk. If you want a trunk to perform filtering, first configure the trunk, then configure the trunk for filtering. Refer to “Config­ uring a Filter on a Port Trunk” on page 11-19.

Filter Types and OperationTable 11-1. Filter Types and Criteria

Static Filter	Selection Criteria
Type
Source-Port	Inbound traffic from a designated, physical source-port will be forwarded or
	dropped on a per-port (destination) basis.
Multicast	Inbound traffic having a specified multicast MAC address will be forwarded to
	outbound ports (the default) or dropped on a per-port (destination) basis.
Protocol	Inbound traffic having the selected frame (protocol) type will be forwarded or
	dropped on a per-port (destination) basis.

11-3