Vlan-Based Filtering; Figure 7-4: Vlan-Based Filtering - Nortel Web OS Switch Software Application Manual

Web OS 10.0 Application Guide

VLAN-based Filtering

Filters are applied per switch, per port, or per VLAN. VLAN-based filtering allows a single
Web switch to provide differentiated services for multiple customers, groups, or departments.
For example, you can define separate filters for Customers A and B on the same Web switch
on two different VLANs. If VLANs are assigned based on data traffic, for example, ingress
traffic on VLAN 1, egress traffic on VLAN 2, and management traffic on VLAN 3, filters can
be applied accordingly to the different VLANs.
In the following example shown in
VLAN 20 to browse the Web, and Filter 3 is configured to allow local clients on VLAN 30 to
Telnet anywhere outside the local intranet. Filter 7 is configured to deny ingress traffic from
VLAN 70.
Figure 7-4 VLAN-based Filtering
n
174 Chapter 7: Filtering
Unique Filters per
VLAN (up to 2048)
Internet
Web Switch
Figure 7-4, Filter 2 is configured to allow local clients on
Filter 3
STOP
VLAN 20
VLAN 30
VLAN 70
212777-A, February 2002