Specifications

Chapter 13 filters Commands
The filters commands let you create and apply the following types of security filters:
• Address filters – Address filters block traffic based on a frame’s source MAC
address, destination MAC address, or both. Address filters are always configured
and applied on the input port.
• Static entry filters – Static entry filters allow or force traffic to go to a set of destina-
tion ports based on a frame’s source MAC address, destination MAC address, or
both. Static entry filters are always configured and applied on the input port. You
can configure source static entry filters, destination static entry filters, and flow
static entry filters. Source static entry filters allow or disallow frames based on their
source MAC address; destination static entry filters allow or disallow frames based
on their destination MAC address. Flow static entries allow or disallow traffic based
on their source and destination MAC addresses.
• Port-to-address locks – Port-to-address lock filters “lock” a user to a port or set of
ports, disallowing them access to other ports.
• Secure ports – Secure port filters shut down Layer-2 access to the SSR from a spe-
cific port or drop all Layer-2 packets received by a port. Used by themselves, secure
ports secure unused SSR ports. When used in conjunction with static entry filters,
secure ports drop all received or sent traffic (depending on the static entry filter)
except traffic forced to or from the port by the static entry filter.
Command Summary
Table 8 lists the filters commands. The sections following the table describe the
command syntax.
Table 8: filters commands
filters add address-filter name
<name>
source-mac
<MACaddr>
dest-mac
<MACaddr>
vlan
<VLAN-num>
in-port-list
<port-list>
filters add port-address-lock name
<name>
source-mac
<MACaddr>
vlan
<VLAN-num>
in-port-list
<port-list>
filters add secure-port name
<name>
direction source|destination vlan
<VLAN-num>
in-port-list
<port-list>
Chapter 13