Configuring Traffic/Security Filters; Configuring A Source-Port Traffic Filter - HP ProCurve 6400cl Series Access Security Manual

Traffic/Security Filters

Configuring Traffic/Security Filters

9-16

Configuring Traffic/Security Filters

Use this procedure to specify the type of filters to use on the switch and
whether to forward or drop filtered packets for each filter you specify.
1. Select the static filter type(s).
2. For inbound traffic matching the filter type, determine the filter action
you want for each outbound (destination) port on the switch (forward or
drop). The default action for a new filter is to forward traffic of the
specified type to all outbound ports.
3. Configure the filter.
4. Use show filter (page 9-21) to check the filter listing to verify that you have
configured correct action for the desired outbound ports.

Configuring a Source-Port Traffic Filter

Syntax: [no] filter
[source-port < port-number | trunk-name>]
Specifies one inbound port or trunk. Traffic received
inbound on this interface from other devices will be
filtered. The no form of the command deletes the source-
port filter for < port-number > and returns the destination
ports for that filter to the
Forward on all ports.)
Note: If multiple VLANs are configured, the source-port
and the destination port(s) must be in the same VLAN
unless routing is enabled. Similarly, if a VLAN containing
both the source and destination is multinetted, the
source and destination ports and/or trunks must be in the
same subnet unless routing is enabled.
[ drop ] < destination-port-list > [ forward < port-list >]
action. (Default:
Forward