C
LIENT
S
ECURITY
C
OMMANDS
23-6
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
• Both the specified source MAC address and source IP address for an
entry must be matched to satisfy the filtering rule. Any packet
matching a specified entry is dropped at the input port.
• To delete an entry for a MAC and IP address pair, you can specify
either the MAC address or both the MAC and IP address.
• To specify a port list, use a hyphen to indicate a range of ports, or a
comma to indicate a group of non-consecutive ports.
• To specify a MAC address use either of the following hexidecimal
formats: xx-xx-xx-xx-xx-xx or xxxxxxxxxxxx
• This switch provides a total of 7 masks for filtering functions,
including IP-MAC address packet filtering, NetBIOS packet filtering,
DHCP packet filtering, and ACLs. One mask is allocated to IP-MAC
packet filtering if any entries are defined. This mask will be released for
use by other filtering functions if all IP-MAC packet filtering entries
are deleted.
Example
Console(config)#filter ipmac add 1/1 00-e0-29-94-34-de 192.168.0.33
Console(config)#