Network Router User Manual

ManualsBrandsCabletron Systems ManualsNetwork RouterSMARTSWITCH ROUTER 9032578-05

301

302

303

304

305

306

307

308

309

310

Table Of Contents

Notices
Contents
About This Manual
- Related Documentation
- Document Conventions
Introduction
- Configuration Files
- Using the Command Line Interface
- Displaying and Changing Configuration Information
- Port Names
Hot Swapping Line Cards and Control Modules
- Hot Swapping Overview
- Hot Swapping Line Cards
- Hot Swapping a Secondary Control Module
- Hot Swapping a Switching Fabric Module (SSR 8600 only)
  - Removing the Switching Fabric Module
  - Installing a Switching Fabric Module
Bridging Configuration Guide
- Bridging Overview
  - Spanning Tree (IEEE 802.1d)
  - Bridging Modes (Flow-Based and Address-Based)
- VLAN Overview
- Configuring SSR Bridging Functions
- Monitoring Bridging
- Configuration Examples
  - Creating an IP or IPX VLAN
  - Creating a non-IP/non-IPX VLAN
SmartTRUNK Configuration Guide
- Overview
- Configuring SmartTRUNKs
- Monitoring SmartTRUNKs
- Example Configurations
ATM Configuration Guide
- ATM Overview
- Virtual Channels
  - Creating a Virtual Channel
- Service Class Definition
  - Creating a Service Class Definition
  - Applying a Service Class Definition
- Cell Scrambling
  - Enabling Cell Scrambling
- Cell Mapping
  - Selecting the Cell Mapping Format
- Creating a Non-Zero VPI
  - Setting the Bit Allocation for VPI
- Displaying ATM Port Information
- ATM Sample Configuration 1
Packet-over-SONET Configuration Guide
- Overview
  - Configuring IP Interfaces for PoS Links
- Configuring Packet-over-SONET Links
- Configuring Automatic Protection Switching
  - Configuring Working and Protecting Ports
- Specifying Bit Error Rate Thresholds
- Monitoring PoS Ports
- Example Configurations
DHCP Configuration Guide
- DHCP Overview
- Configuring DHCP
- Updating the Lease Database
- Monitoring the DHCP Server
- DHCP Configuration Examples
IP Routing Configuration Guide
- IP Routing Protocols
  - Unicast Routing Protocols
  - Multicast Routing Protocols
- Configuring IP Interfaces and Parameters
- Configuring Router Discovery
- Configuration Examples
  - Assigning IP/IPX Interfaces
VRRP Configuration Guide
- VRRP Overview
- Configuring VRRP
- Monitoring VRRP
  - ip-redundancy trace
  - ip-redundancy show
- VRRP Configuration Notes
RIP Configuration Guide
- RIP Overview
- Configuring RIP
- Monitoring RIP
- Configuration Example
OSPF Configuration Guide
- OSPF Overview
  - OSPF Multipath
- Configuring OSPF
- Monitoring OSPF
- OSPF Configuration Examples
BGP Configuration Guide
- BGP Overview
  - The SSR BGP Implementation
- Basic BGP Tasks
- BGP Configuration Examples
Routing Policy Configuration Guide
- Route Import and Export Policy Overview
- Configuring Simple Routing Policies
- Configuring Advanced Routing Policies
Multicast Routing Configuration Guide
- IP Multicast Overview
  - IGMP Overview
  - DVMRP Overview
- Configuring IGMP
- Configuring DVMRP
- Monitoring IGMP & DVMRP
- Configuration Examples
IP Policy-Based Forwarding Configuration Guide
- Overview
- Configuring IP Policies
- IP Policy Configuration Examples
- Monitoring IP Policies
Network Address Translation Configuration Guide
- Overview
- Configuring NAT
  - Setting Inside and Outside Interfaces
  - Setting NAT Rules
    - Static
    - Dynamic
- Forcing Flows through NAT
- Managing Dynamic Bindings
- NAT and DNS
- NAT and ICMP Packets
- NAT and FTP
- Monitoring NAT
- Configuration Examples
Web Hosting Configuration Guide
- Overview
- Load Balancing
- Web Caching
IPX Routing Configuration Guide
- IPX Routing Overview
  - RIP (Routing Information Protocol)
  - SAP (Service Advertising Protocol)
- Configuring IPX RIP & SAP
- Configuring IPX Interfaces and Parameters
- Configuring IPX Routing
- Monitoring an IPX Network
- Configuration Examples
Access Control List Configuration Guide
- ACL Basics
- Creating and Modifying ACLs
  - Editing ACLs Offline
  - Maintaining ACLs Using the ACL Editor
- Using ACLs
- Enabling ACL Logging
- Monitoring ACLs
Security Configuration Guide
- Security Overview
- Configuring SSR Access Security
- Layer-2 Security Filters
- Layer-3 Access Control Lists (ACLs)
- Layer-4 Bridging and Filtering
QoS Configuration Guide
- QoS & Layer-2/Layer-3/Layer-4 Flow Overview
- Traffic Prioritization for Layer-2 Flows
  - Configuring Layer-2 QoS
  - 802.1p Priority Mapping
- Traffic Prioritization for Layer-3 & Layer-4 Flows
  - Configuring IP QoS Policies
    - Setting an IP QoS Policy
    - Specifying Precedence for an IP QoS Policy
  - Configuring IPX QoS Policies
    - Setting an IPX QoS Policy
    - Specifying Precedence for an IPX QoS Policy
- Configuring SSR Queueing Policy
  - Allocating Bandwidth for a Weighted-Fair Queuing Policy
- Weighted Random Early Detection (WRED)
- ToS Rewrite
  - Configuring ToS Rewrite for IP Packets
- Monitoring QoS
- Limiting Traffic Rate
Performance Monitoring Guide
- Performance Monitoring Overview
- Configuring the SSR for Port Mirroring
- Monitoring Broadcast Traffic
RMON Configuration Guide
- RMON Overview
- Configuring and Enabling RMON
- Using RMON
- Configuring RMON Groups
  - Configuration Examples
- Displaying RMON Information
  - RMON CLI Filters
    - Creating RMON CLI Filters
    - Using RMON CLI Filters
- Troubleshooting RMON
- Allocating Memory to RMON
LFAP Configuration Guide
- Overview
- Cabletron’s Traffic Accounting Services
- Configuring the LFAP Agent on the SSR
- Monitoring the LFAP Agent on the SSR
WAN Configuration Guide
- WAN Overview
- Frame Relay Overview
  - Virtual Circuits
    - Permanent Virtual Circuits (PVCs)
- Configuring Frame Relay Interfaces for the SSR
- Monitoring Frame Relay WAN Ports
- Frame Relay Port Configuration
- Point-to-Point Protocol (PPP) Overview
  - Use of LCP Magic Numbers
- Configuring PPP Interfaces
- Monitoring PPP WAN Ports
- PPP Port Configuration
- WAN Configuration Examples
  - Simple Configuration File
  - Multi-Router WAN Configuration
New Features Supported on Line Cards
- Introduction
- SSR 8000/8600 Line Cards
- SSR 2000 Line Cards
- New Features that Require Specific Line Cards
- Summary
- Identifying a Line Card

SmartSwitch Router User Reference Manual 281

Chapter 20: Security Configuration Guide

Configuring Layer-2 Port-to-Address Lock Filters

Port address lock filters allow you to bind or “lock” specific source MAC addresses to a

port or set of ports. Once a port is locked, only the specified source MAC address is

allowed to connect to the locked port and the specified source MAC address is not

allowed to connect to any other ports.

To configure Layer-2 port address lock filters, enter the following commands in Configure

mode:

Configuring Layer-2 Static Entry Filters

Static entry filters allow or force traffic to go to a set of destination ports based on a

frame's source MAC address, destination MAC address, or both source and destination

MAC addresses in flow bridging mode. Static entries are always configured and applied

at the input port. You can set the following static entry filters:

• Source static entry, which specifies that any frame coming from source MAC address

will be allowed or disallowed to go to a set of ports

• Destination static entry, which specifies that any frame destined to a specific

destination MAC address will be allowed, disallowed, or forced to go to a set of ports

• Flow static entry, which specifies that any frame coming from a specific source MAC

address that is destined to specific destination MAC address will be allowed,

disallowed, or forced to go to a set of ports

To configure Layer-2 static entry filters, enter the following commands in Configure

mode:

Configure a port address lock filter.

filters add port-address-lock name

<name> source-mac <MACaddr> vlan

<VLAN-num> in-port-list <port-list>

Configure a source static

entry filter.

filters add static-entry name <name>

restriction allow|disallow|force source-

mac

<MACaddr> source-mac-mask <mask>

vlan <VLAN-num> in-port-list <port-

list> out-port-list

<port-list>

Configure a destination static

entry filter.

filters add static-entry name <name>

restriction allow|disallow|force dest-

mac

<MACaddr> dest-mac-mask <mask> vlan

<VLAN-num> in-port-list <port-list> out-

port-list

<port-list>