Table of Contents
Advertisement
Chapter 1: Features Overview
By default, the IA 1100/1200 uses one MAC address for all interfaces. The IA 1100/1200
can be configured to have a separate MAC address for each IP interface. When the IA
1100/1200 receives a packet whose destination MAC address is one of the IA 1100/1200's
IP interface MAC addresses, the port that received the packet from the network uses
information in the module's L3 lookup tables (or information supplied by the
motherboard) to route the packet to its IP destination(s).
You can create only one IP interface on a single port or VLAN. You can add secondary IP
addresses to the same IP interface. When you add an interface to a set of ports, you are
adding a VLAN to those ports. Ports that contain IP interfaces can still perform Layer-2
bridging.
The IA 1100/1200 supports the following IP unicast routing protocols:
•
RIP v1 and RIP v2
•
OSPF v2
•
BGP v2/v3/v4
IP interfaces do not use a specific routing protocol by default. When you configure an
interface for routing, you also specify the routing protocol the interface will use.
Layer-4 Switching
In addition to Layer-2 bridging and Layer-3 routing, the IA 1100/1200 performs Layer-4
switching. Layer-4 switching is based on applications and flows.
•
Layer-4 applications – The IA 1100/1200 understands the application for which an IP
or IPX packet contains data and therefore enables you to manage and control traffic on
an application basis. For IP traffic, the IA 1100/1200 looks at the packet's TCP or UDP
port number to determine the application.
•
Layer-4 flows – The IA 1100/1200 can store Layer-4 flows in each Gigabit port. A
Layer-4 flow consists of the source and destination addresses in the IP or IPX packet
combined with the TCP or UDP source and destination port number for IP. You can
therefore manage and control individual flows between hosts on an individual
application basis.
A single host can have many individual Layer-4 entries in the IA 1100/1200. For example,
an IP host might have separate Layer-4 application entries for email, FTP, HTTP, and so on,
or separate Layer-4 flow entries for specific email destinations and for specific FTP and
Web connections.
Security
The bridging, routing, and application (Layer-2, Layer-3, and Layer-4) support described
in previous sections enables you to implement security filters that meet the specific needs
8
Internet Appliance 1100/1200 Getting Started Guide
Advertisement
Table of Contents
