Intel ZT 8101 10/100 user manual MAC Address Filtering, IP Address Filtering

Switch Management and Operating Concepts

—Destination only

—Source or Destination

•Physical port— Set Priority level for all ingress frames on a physical port

•802.1p—802.1p priority bits are part of an IEEE 802.1Q VLAN tagged Ethernet frame. When a frame arrives at the switch, the 802.1p priority field is examined and is mapped to a hardware queue. By default, 802.1p priority information is not replaced or manipulated, and the information observed on ingress is preserved when transmitting the frame.

Filtering

A filtering database is used to segment the network and control communication between segments. It can also filter packets off the network for intrusion control. Static filtering entries can be made by MAC or IP addresses.

Each port on the switch is a unique collision domain, and the switch filters (discards) packets whose destination lies on the same port as where it originated. This keeps local packets from disrupting communications on other parts of the network.

The switch does some filtering automatically:

•Dynamic filtering—The switch automatically learns and ages MAC addresses and their location on the network. Filtering occurs to keep local traffic confined to its segment.

•Filtering done by the Spanning Tree Protocol—STP filters packets based on topology, ensuring that signal loops don't occur.

•Filtering done for VLAN integrity—The switch filters packets from a member of a VLAN (VLAN 2, for example) destined for a device on another VLAN (VLAN 3).

You can also manually configure the switch to drop packets from specified MAC and IP addresses. Whenever a switch encounters a packet originating from, or destined to, a MAC address or an IP address entered into the filter table, the switch discards the packet.

MAC Address Filtering

When filtering by MAC address, you have two options:

•Static—This option allows you to specify which port handles the packets from the specified MAC address.

•BlackHole—This option allows you to have the switch drop the packets from, or to, a specified MAC address.

IP Address Filtering

When filtering by IP address, you have three options. You can have the switch drop the packet based on where the IP address appears in the

•Source

•Destination

•Source and destination

30 Intel® NetStructure™ ZT 8101 10/100 Ethernet Switch User’s Manual