Cabletron Systems SMARTSWITCH ROUTER 9032578-05 - Manual (Page 307)

SmartSwitch Router User Reference Manual 281
Chapter 20: Security Configuration Guide
Configuring Layer-2 Port-to-Address Lock Filters
Port address lock filters allow you to bind or “lock” specific source MAC addresses to a
port or set of ports. Once a port is locked, only the specified source MAC address is
allowed to connect to the locked port and the specified source MAC address is not
allowed to connect to any other ports.
To configure Layer-2 port address lock filters, enter the following commands in Configure
mode:
Configuring Layer-2 Static Entry Filters
Static entry filters allow or force traffic to go to a set of destination ports based on a
frame's source MAC address, destination MAC address, or both source and destination
MAC addresses in flow bridging mode. Static entries are always configured and applied
at the input port. You can set the following static entry filters:
• Source static entry, which specifies that any frame coming from source MAC address
will be allowed or disallowed to go to a set of ports
• Destination static entry, which specifies that any frame destined to a specific
destination MAC address will be allowed, disallowed, or forced to go to a set of ports
• Flow static entry, which specifies that any frame coming from a specific source MAC
address that is destined to specific destination MAC address will be allowed,
disallowed, or forced to go to a set of ports
To configure Layer-2 static entry filters, enter the following commands in Configure
mode:
Configure a port address lock filter. filters add port-address-lock name
source-mac vlan
in-port-list
Configure a source static
entry filter. filters add static-entry name
restriction allow|disallow|force source-
mac
source-mac-mask
vlan in-port-list
list> out-port-list
Configure a destination static
entry filter. filters add static-entry name
restriction allow|disallow|force dest-
mac
dest-mac-mask vlan
in-port-list out-
port-list