Foundry Networks Switch and Router Installation And Configuration Manual page 1005

Foundry devices provide a robust array of policies and filters. You can configure policies and filters to do the
following:
• Change Quality-of-Service priorities for individual ports, VLANs, Layer 4 flows, static MAC entries, and
AppleTalk sockets.
• Configure protocol-based VLANs, IP sub-net VLANs, and IPX network VLANs within standard 802.1d port-
based VLANs.
• Forward or drop IP packets based on source and destination IP addresses, Layer 4 information (such as TCP
or UDP port), or both.
• Learn or drop RIP routes on incoming traffic, based on network address or the RIP neighbor's IP address.
• Control learning and advertisement of RIP routes, based on network address or the RIP neighbor's IP
address.
• Forward or drop IPX packets based on source and destination network address and socket information.
• Control learning and advertisement of IPX RIP routes.
• Permit or deny access to IPX servers.
• Permit or deny AppleTalk zone and network information to reach other zones.
• Control learning and advertisement of routes learned from BGP4 neighbors. You can filter based on network
address information, AS-path information, and community names.
• Redistribute routes among RIP, OSPF, and BGP4.
• In ServerIron Transparent Cache Switching (TCS) configurations, redirect HTTP traffic to cache servers or
send the traffic to the Internet.
• In router acceleration configurations, redirect IP or IPX packets received from specific hosts to routers for
conventional forwarding instead of directly switching the packets at Layer 3.
• Filter on specific MAC addresses, on Layer 2 multicast packets, and on Layer 2 broadcast packets.
This appendix describes the various types of Foundry policies and filters. For each type of policy or filter, the CLI
command syntax and the Web management links for configuring the policy or filter are provided. This appendix
also refers you to specific configuration procedures.
NOTE: This appendix does not describe Access Control Lists (ACLs) or IPX SAP ACLs, which are additional
methods for filtering packets. See "Using Access Control Lists (ACLs)" on page 13-1, "Configuring BGP4" on
page 19-1, and "Configuring IPX SAP Access Control Lists (ACLs)" on page 23-9.
December 2000
Appendix C
Policies and Filters
C - 1