Enterasys Networks CSX6000 User Manual
Page 279
Central Site Remote Access Switch 279
C
ONFIGURING
A
DVANCED
B
RIDGING
Bridge Filters
5.
PROTOCOL protocol-Id FORWARD < distribution list >
This filter allows you to restrict packets based on the Ethernet protocol Id field or the
corresponding 802.3 LSAP field. You can specify the protocol Id that is to be forwarded. The
filtering mechanism will determine if the packet is Ethernet format or 802.3 format. The
Ethernet type or LSAP field will be checked based on packet format.
6.
PROTOCOL protocol-Id CONNECT < distribution list >
This filter allows you to restrict packets based on the Ethernet protocol Id field or the
corresponding 802.3 LSAP field. You can specify the protocol Id that is to be connected and
then forwarded. The filtering mechanism will determine if the packet is Ethernet format or
802.3 format. The Ethernet type or LSAP field will be checked based on packet format. See the
section titled
for more information.
7.
PACKET OFFSET dd MASK xxxxxxxxxxxx VALUE xxxxxxxxxxxx FORWARD
This filter allows you to restrict packets based on packet data outside the source and
destination MAC addresses or protocol Id. For example, you may wish to filter packets based
on IP address information. You would then specify the offset (dd) into the MAC frame where
the filter comparison is to begin. The mask data indicates which bits within the frame data are
significant and will be compared to the value. The frame data is logically “anded” with the
mask, and then compared to the specified value. The value field must be a subset of the mask
field. That is, the value field logically “anded” with the mask field must equal the value field.
The value and mask fields must have equal lengths.
8.
PACKET OFFSET dd MASK xxxxxxxxxxxx VALUE xxxxxxxxxxxx CONNECT
This filter allows you to restrict packets based on packet data outside the source and
destination MAC addresses or protocol Id. For example, you may wish to filter packets based
on IP address information. You would then specify the offset (dd) into the MAC frame where
the filter comparison is to begin. The mask data indicates which bits within the frame data are
significant and will be compared to the value. The frame data is logically “anded” with the
mask, and then compared to the specified value. The value field must be a subset of the mask
field. That is, the value field logically “anded” with the mask field must equal the value field.
The value and mask fields must have equal lengths.
9.
PACKET OFFSET dd MASK xxxxxxxxxxxx VALUE xxxxxxxxxxxx DISCARD
This filter allows you to specify the DISCARD filter action on a packet data filter. This gives you
the flexibility of allowing a global class of data to be forwarded, and restrict specific subsets of
that data. For example you may forward all IPX data packets but restrict workstation watchdog
packets.