Introduction - HP E3800-24G-PoE+-2SFP+ Access Security Manual

Traffic/Security Filters and Monitors

Introduction

12-2
Introduction
Feature
configure source-port filters
configure protocol filters
configure multicast filters
display filter data
You can enhance in-band security and improve control over access to network
resources by configuring static filters to forward (the default action) or drop
unwanted traffic. That is, you can configure a traffic filter to either forward
or drop all network traffic moving to outbound (destination) ports and trunks
(if any) on the switch.
Filter Limits
The switch accepts up to 101 static filters. These limitations apply:
■ Source-port filters: up to 78
Multicast filters: up to 16 with 1024 or fewer VLANs configured. Up to 8
■
with more than 1024 VLANs configured.
■ Protocol filters: up to 7
Using Port Trunks with Filters
The switch manages a port trunk as a single source or destination for source-
port filtering. If you configure a port for filtering before adding it to a port
trunk, the port retains the filter configuration, but suspends the filtering action
while a member of the trunk. If you want a trunk to perform filtering, first
configure the trunk, then configure the trunk for filtering. Refer to "Config-
uring a Filter on a Port Trunk" on page 12-18.
Default Menu CLI
none n/a page 12-20
none n/a page 12-20
none n/a page 12-20
n/a n/a page 12-22
WebAgent
n/a
n/a
n/a
n/a