Specifications

SSR Command Line Interface Reference Manual 203
Chapter 16
filters Commands
The filters commands let you create and apply the following types of security filters:
• Address filters. Address filters block traffic based on a frame’s source MAC address,
destination MAC address, or both. Address filters are always configured and applied
on the input port.
• Static entry filters. Static entry filters allow or force traffic to go to a set of destination
ports based on a frame’s source MAC address, destination MAC address, or both.
Static entry filters are always configured and applied on the input port. You can
configure source static entry filters, destination static entry filters, and flow static entry
filters. Source static entry filters allow or disallow frames based on their source MAC
address; destination static entry filters allow or disallow frames based on their
destination MAC address. Flow static entries allow or disallow traffic based on their
source and destination MAC addresses.
• Port-to-address locks. Port-to-address lock filters “lock” a user to a port or set of ports,
disallowing them access to other ports.
• Secure ports. Secure port filters shut down Layer 2 access to the SSR from a specific
port or drop all Layer 2 packets received by a port. Used by themselves, secure ports
secure unused SSR ports. When used in conjunction with static entry filters, secure
ports drop all received or sent traffic (depending on the static entry filter) except traffic
forced to or from the port by the static entry filter.
Command Summary
Table 10 lists the filters commands. The sections following the table describe the command
syntax.