Monitoring layer-2 security filters – Cabletron Systems SmartSwitch User Manual
Page 278

Chapter 18: Security Configuration Guide
278
SmartSwitch Router User Reference Manual
•
Combine a destination secure port filter with a flow static entry to drop all received
traffic but allow any frame coming from specific source MAC address that is destined
to specific destination MAC address to go through
To configure Layer-2 secure port filters, enter the following commands in Configure
mode:
Monitoring Layer-2 Security Filters
The SSR provides display of Layer-2 security filter configurations contained in the routing
table.
To display security filter information, enter the following commands in Enable mode.
Configure a source secure port
filter.
filters add secure-port name
direction source vlan
in-port-list
Configure a destination secure
port filter.
filters add secure-port name
direction destination vlan
in-port-list
Show address filters.
filters show address-filter
[all-source|all-destination|all-flow]
[source-mac
dest-mac
]
[ports
] [vlan
]
Show port address lock
filters.
filters show port-address-lock ports
[ports
] [vlan
]
[source-mac
]
Show secure port filters.
filters show secure-port
Show static entry filters.
filters show static-entry
[all-source|all-destination|all-flow]
ports
vlan
[source-mac
dest-mac
]