beautypg.com

Monitor layer-2 security filters – Cabletron Systems SmartSwitch Router 9032578-02 User Manual

Page 167

background image

SmartSwitch Router User Reference Manual

167

Chapter 10: Security Configuration Guide

Combine a destination secure port filter with a flow static entry to drop all received
traffic but allow any frame coming from specific source MAC address that is destined
to specific destination MAC address to go through

To configure Layer-2 secure port filters, enter the following commands in Configure
mode:

Monitor Layer-2 Security Filters

The SSR provides display of Layer-2 security filter configurations contained in the routing
table.

To display security filter information, enter the following commands in Enable mode.

Configure a source secure port
filter.

filters add secure-port name

direction source vlan

in-port-list

Configure a destination secure
port filter.

filters add secure-port name

direction destination vlan

in-port-list

Show address filters.

filters show address-filter

[all-source|all-destination|all-flow]
[source-mac

dest-mac

]

[ports

] [vlan

]

Show port address lock
filters.

filters show port-address-lock ports

[ports

] [vlan

]

[source-mac

]

Show secure port filters.

filters show secure-port

Show static entry filters.

filters show static-entry

[all-source|all-destination|all-flow]
ports

vlan

[source-mac

dest-mac

]