Configuring Vlan Trunk Ports; Configure Bridging For Non-Ip/Ipx Protocols; Configure Layer-2 Filters - Cabletron Systems SmartSwitch 8-slot User's Reference Manual

Chapter 2: Bridging Configuration Guide

Configuring VLAN Trunk Ports

The SSR supports standards-based VLAN trunking between multiple SSRs as defined
by IEEE 802.1Q. 802.1Q adds a header to a standard Ethernet frame which includes a
unique VLAN id per trunk between two SSRs. These VLAN ids extend the VLAN
broadcast domain to more than one SSR.
To configure a VLAN trunk, perform the following command in the Configure mode.
Configure 802.1Q VLAN trunks.

Configure Bridging for Non-IP/IPX Protocols

By default, all non-routable protocols (AppleTalk and DECnet) are bridged within the
SSR. All physical ports containing non-routable protocols should be assigned to the
same VLAN, thus allowing bridging between ports. Routing can still be performed on
the defined VLAN by assigning an IP or IPX interface.

Configure Layer-2 Filters

Layer-2 security filters on the SSR allow you to configure ports to filter specific MAC
addresses. When defining a Layer-2 security filter, you specify to which ports you
want the filter to apply. Refer to the "Security Configuration Chapter" for details on
configuring Layer-2 filters. You can specify the following security filters:
• Address filters
These filters block traffic based on the frame's source MAC address, destination
MAC address, or both source and destination MAC addresses in flow bridging
mode. Address filters are always configured and applied to the input port.
• Port-to-address lock filters
These filters prohibit a user connected to a locked port or set of ports from using an-
other port.
• Static entry filters
These filters allow or force traffic to go to a set of destination ports based on a
frame's source MAC address, destination MAC address, or both source and destina-
tion MAC addresses in flow bridging mode. Static entries are always configured and
applied at the input port.
• Secure port filters
A secure filter shuts down access to the SSR based on MAC addresses. All packets
received by a port are dropped. When combined with static entries, however, these
filters can be used to drop all received traffic but allow some frames to go through.
2 - 10
<port-type> <port-list>
vlan make
SSR User Reference Manual