Traffic/Security Filters and Monitors

Configuring Traffic/Security Filters

For example, suppose you wanted to configure the filters in table 11-3on a switch. (For more on source-port filters, refer to “Configuring a Source-Port Traffic Filter” on page 11-18.)

Table 11-3. Filter Example

Filter Type

Filter Value

Action

Destination Ports

 

 

 

 

Source-Port

Inbound ports: A1, A2*

Drop

D1-D4

Multicast

010000-123456

Drop

C1-C24, D5-D10

Multicast

010000-224466

Drop

B1-B4

Protocol

Appletalk

Drop

C12-C18, D1

Protocol

ARP

Drop

D17, D21-D24

*Because the switch allows one inbound port in a source-port filter, the requirement to filter ports A1 and A2 means you will configure two separate source-port filters.

The following commands configure the filters listed above:

Figure 11-16. Configuring Various Traffic/Security FiltersFilter Indexing

The switch automatically assigns each new filter to the lowest-available index (IDX) number. The index numbers are included in the show filter command described in the next section and are used with the show filter < index > command to display detailed information about a specific filter.

If there are no filters currently configured, and you create three filters in succession, they will have index numbers 1 - 3. However, if you then delete the filter using index number “2” and then configure two new filters, the first new filter will receive the index number “2” and the second new filter will receive the index number "4". This is because the index number “2” was made vacant by the earlier deletion, and was therefore the lowest index number available for the next new filter.

11-22