HP ProCurve 9304M Installation And Configuration Manual page 151

displayed, as shown in the following example.
• If a MAC filter group is already configured and you are adding a new one, click on the Show link to
display the MAC Filter Group list. Then click on the Add MAC Filter Group link to display the Filter Group
configuration panel, as shown in the following example.
• If you are modifying an existing MAC filter group, click on the Modify button to the right of the row
describing the filter group to display the Filter Group configuration panel, as shown in the following
example.
16. Select the port (and slot, if applicable) for which you are configuring the filter group. You can configure one
MAC filter group on each port.
17. Enter the filter numbers in the Filter ID List field. Separate each filter number from the next one by a single
space. The software applies the filters in the order you list them, from left to right. When a packet matches a
filter, the software stops comparing the packet against the filter list and applies the action specified in the
matching filter.
NOTE: The filters must be applied as a group. For example, if you want to apply four filters to an interface,
they must all appear on the same command line.
NOTE: You cannot add or remove individual filters in the group. To add or remove a filter on an interface,
apply the filter group again containing all the filters you want to apply to the port.
NOTE: If you apply a filter group to a port that already has a filter group applied, the older filter group is
replaced by the new filter group.
18. Click the Add button to save the filter to the device's running-config file.
19. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change
to the startup-config file on the device's flash memory.
Configuring MAC Address Filters for Virtual Routing Ports
Software release 07.6.04 allows you to apply MAC filters to virtual routing interfaces; however, MAC filters used
on a virtual routing interface can only deny packets. Permit is not available. Packets are denied based on their
source MAC address. The Routing Switch will drop any Layer 2 or Layer 3 packet that originated from the
specified source MAC address.
NOTE: No etype arguments will be checked.
To apply a MAC filter on a virtual routing interface using the CLI, first create a filter group that denies specific
source MAC addresses using the mac filter-group command. (Refer to the Installation and Basic Configuration
Guide for details.) Then use the mac deny-src-mac-filter-grp... command to apply them to virtual routing
interfaces. Enter commands such as the following:
HP9300(config)# interface ve 2
Configuring Basic Features
6 - 39