Loading Packet Filters; Assigning Packet Filters To Ports - 3Com SUPERSTACK 2200 User Manual

12-22 C 12: C
HAPTER
Loading Packet
Filters
Top-Level Menu
system
list
display
ethernet
display
ipFragmentation
fddi
create
ipxSnapTranslation
bridge
delete
addressThreshold
ip
edit
agingTime
snmp
load
stpState
analyzer
assign
stpPriority
script
unassign
stpMaxAge
logout
addressGroup
stpHelloTime
portGroup
stpForwardDelay
stpGroupAddress
port
packetFilter
Assigning Packet
Filters to Ports
Packet filter path
assignments
U P
REATING AND SING ACKET
When you create packet filters using an external text editor, you must load
the filters onto the system from the network host on which you created
them. Once loaded, the packet filter definition is converted into the internal
format that is used by the packet filter code in the system.
To load a packet filter:
1 From the top level of the Administration Console, enter:
bridge packetFilter load
You are prompted for a host IP address, file path name, user name, and
password. To use the value in brackets, press [Return] at any prompt.
2 Enter the host IP address.
3 Enter the path name.
4 Enter your user name.
5 Enter your password.
The packet filter is loaded onto the Switch 2200.
Any syntax errors in the packet filter definition are reported to you at this
time. See Appendix A: Packet Filter Opcodes, Examples, and Syntax Errors for a
description of these errors. If errors are detected, you are offered the option
of editing the filter definition or terminating the load.
The load might fail if the system has insufficient nonvolatile RAM to store
the filter. In this case, an error message tells you that the system did not
accept the load.
To assign a packet filter to one or more ports, the packet filter must reside
on the system. Each path (transmit all, transmit multicast, receive all, and
receive multicast) of a port can have only one packet filter assigned to it;
however, you can assign a single packet filter to multiple paths and ports.
Placing a filter on the transmit path confines the packet to the segment it
originated from if it does not meet the forwarding criteria. Placing a filter on
the receive path prohibits a packet from accessing certain segments unless
F
ILTERS