Configuring Mac Packet Filters - Nortel Secure 4134 Configuration

112 Packet filter configuration
Variable
[log {on|off}]
[expire <expiry-time>]
[no]
Configuring MAC packet filters
Configure MAC packet filters to be applied to one or more interfaces.
Procedure steps
Step
1
2
3
Table 42
Variable definitions
Variable
{permit | deny}
<src-mac>
<dst-mac>
Copyright © 2007, Nortel Networks
.
Value
Allows a logging message to be reported to the user
when a rule match occurs (optional).
on: Turns on logging of matching packets.
off: Turns off logging the matching packet off
(default)
Specifies the rule expiry time in seconds
Removes the specified packet filter.
Action
To enter configuration mode, enter:
configure terminal
To specify the name of the MAC packet filter to create or configure,
enter:
mac packet-filter <packet-filter-name>
To configure rules for the packet filter, enter:
[no] {add | insert <lineno>}
{permit | deny}
{<src-mac> <dst-mac>}
[smask <src-mask>] [dmask <dst-mask>]
[ethertype <ether-type>]
[cos <cos-value>]
[vlan <vlan-id>]
Value
Specifies the action to perform when a packet
matches the filter rule:
permit: allow the packet to cross the filter
deny: drop the packet
Source MAC address.
Destination MAC address.
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600 01.02 Standard
10.0 3 August 2007
—End—