Mac Address; Filter; Speed; Duplex - Cisco VPN 3000 User Manual

IPSec LAN-to-LAN, for example. You should designate only one VPN Concentrator interface as a
public interface.

MAC Address

This is the unique hardware MAC (Medium Access Control) address for this interface, displayed in
6-byte hexadecimal notation. You cannot change this address.

Filter

The filter governs the handling of data packets through this interface: whether to forward or drop,
according to configured criteria. Cisco supplies three default filters that you can modify and use with the
VPN Concentrator. You can configure filters on the Configuration | Policy Management | Traffic Management
screens.
Click the drop-down menu button and select the filter to apply to this interface:
Other filters that you have configured also appear in this menu.

Speed

Click the drop-down menu button and select the interface speed:

Duplex

Click the drop-down menu button and select the interface transmission mode:
VPN 3000 Concentrator Series User Guide
1. Private (Default) = Allow all packets except source-routed IP packets. Cisco supplies this default
filter for Ethernet 1, but it is not selected by default.
2. Public (Default) = Allow inbound and outbound tunneling protocols plus ICMP and VRRP. Allow
fragmented IP packets. Drop everything else, including source-routed packets. Cisco supplies this
default filter for Ethernet 2, and it is selected by default for Ethernet 2.
= No rules applied to this filter. Drop all packets. Cisco supplies this default filter
3. External (Default)
for Ethernet 3, but it is not selected by default.
= No filter applied to the interface, which means there are no restrictions on data packets.
–None–
This is the default selection for Ethernet 1 and 3.
10 Mbps = Fix the speed at 10 megabits per second (10Base-T networks)
100 Mbps = Fix the speed at 100 megabits per second (100Base-T networks)
= Let the VPN Concentrator automatically detect and set the appropriate speed, either 10
10/100 auto
or 100 Mbps (default). Be sure that the port on the active network device (hub, switch, router, etc.)
to which you connect this interface is also set to automatically negotiate the speed. Otherwise,
select the appropriate fixed speed.
Auto = Let the VPN Concentrator automatically detect and set the appropriate transmission mode,
either full or half duplex (default). Be sure that the port on the active network device (hub, switch,
router, etc.) to which you connect this interface is also set to automatically negotiate the
transmission mode. Otherwise, select the appropriate fixed mode.
Full-Duplex = Fix the transmission mode as full duplex: transmission in both directions at the same
time.
Half-Duplex = Fix the transmission mode as half duplex: transmission in only one direction at a time.
Configuration | Interfaces | Ethernet 1 2 3
3-9