Chapter 36
Configuring Layer 3 Protocol Filtering
Enabling Layer 3 Protocol Filtering
Note
Protocol filtering is supported only on the Ethernet VLANs and on the nontrunking EtherChannel ports.
The set protocolfilter command is not supported on the Network Analysis Module (NAM), the
Supervisor Engine 720, or the Supervisor Engine 32.
To enable Layer 3 protocol filtering on the Ethernet ports, perform this task in privileged mode:
Task
Step 1
Enable Layer 3 protocol filtering on the switch.
Step 2
Set the protocol membership of the desired ports. set port protocol mod/port {ip | ipx | group} {on
Step 3
Verify the port filtering configuration.
This example shows how to enable Layer 3 protocol filtering, set the protocol membership of the ports,
and verify the configuration:
Console> (enable) set protocolfilter enable
Protocol filtering enabled on this switch.
Console> (enable) set port protocol 7/1-4 ip on
IP protocol set to on mode on ports 7/1-4.
Console> (enable) set port protocol 7/1-4 ipx off
IPX protocol disabled on ports 7/1-4.
Console> (enable) set port protocol 7/1-4 group auto
Group protocol set to auto mode on ports 7/1-4.
Console> (enable) show port protocol 7/1-4
Port
-------- ---------- -------- -------- -------- --------- -------- -----------
7/1
7/2
7/3
7/4
Console> (enable)
Disabling Layer 3 Protocol Filtering
To disable Layer 3 protocol filtering, perform this task in privileged mode:
Task
Disable Layer 3 protocol filtering on the switch.
This example shows how to disable Layer 3 protocol filtering:
Console> (enable) set protocolfilter disable
Protocol filtering disabled on this switch.
Console> (enable)
OL-8978-04
Vlan
IP
IP Hosts IPX
4
on
1
5
on
1
2
on
1
4
on
1
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
Configuring Layer 3 Protocol Filtering on the Switch
Command
set protocolfilter enable
| off | auto}
show port protocol [mod[/port]]
IPX Hosts Group
off
0
auto-off 0
off
0
auto-on
off
0
auto-off 0
off
0
auto-on
Command
set protocolfilter disable
Group Hosts
1
1
36-3