Monitoring Layer-2 Security Filters - Cabletron Systems SmartSwitch Router User's Reference Manual

Chapter 18: Security Configuration Guide
• Combine a destination secure port filter with a flow static entry to drop all received
traffic but allow any frame coming from specific source MAC address that is destined
to specific destination MAC address to go through
To configure Layer-2 secure port filters, enter the following commands in Configure
mode:
Configure a source secure port
filter.
Configure a destination secure
port filter.

Monitoring Layer-2 Security Filters

The SSR provides display of Layer-2 security filter configurations contained in the routing
table.
To display security filter information, enter the following commands in Enable mode.
Show address filters.
Show port address lock
filters.
Show secure port filters.
Show static entry filters.
278
filters add secure-port name
direction source vlan
in-port-list
filters add secure-port name
direction destination vlan
in-port-list
filters show address-filter
[all-source|all-destination|all-flow]
<MACaddr>
[source-mac
<port-list>
[ports
filters show port-address-lock ports
<port-list>
[ports
<MACaddr>
[source-mac
filters show secure-port
filters show static-entry
[all-source|all-destination|all-flow]
<port-list>
ports
<MACaddr>
[source-mac
SmartSwitch Router User Reference Manual
<name>
<VLAN-num>
<port-list>
<name>
<VLAN-num>
<port-list>
<MACaddr>
dest-mac
<VLAN-num>
] [vlan
<VLAN-num>
] [vlan
]
<VLAN-num>
vlan
<MACaddr>
dest-mac
]
]
]
]