Layer 2 Filters - Foundry Networks Switch and Router Installation And Configuration Manual

Foundry Switch and Router Installation and Configuration Guide
Filter Type
BGP AS-path filters
BGP community filters
RIP redistribution filters
OSPF redistribution filters
BGP redistribution filters
Layer 4 Filters
TCP/UDP forwarding filters (same as TCP/UDP
access policies)
Cache server redirection filters (same as cache
server redirection policies)

Layer 2 Filters

Layer 2 filters control a Foundry device's receipt of packets based on MAC address information. Foundry devices
provide the following types of Layer 2 filters:
• MAC address filters
• Address-lock filters
MAC Filters
MAC filters forward or drop incoming packets based on the following information:
• Source MAC address
• Destination MAC address
• Encapsulation type and EtherType (optional)
A packet whose Layer 2 information matches the filter is either permitted (forwarded) or denied (dropped). You
define a MAC filter on the global level, then apply it to an interface. The filter applies only to incoming traffic on the
interface.
Action
MAC filters forward (permit) or drop (deny) packets.
Scope
You configure MAC filters globally, then apply them to individual ports. The filters do not take effect until applied
to specific ports. MAC filters apply only to incoming packets.
Syntax
Use the following CLI commands or Web management interface panels to configure MAC filters.
CLI syntax
BigIron(config)# mac filter <filter-num> permit | deny any | <H.H.H>
any | <H.H.H> etype | IIc | snap <operator> <frame-type>
BigIron(config-if-1/1)# mac-filter-group <filter-list>
C - 24
Table C.10: Foundry Filters (Continued)
Supported on...
Router
X
X
X
X
X
X
Table C.11: MAC Filters
Switch ServerIron
X X
X
Web management links
Configure->MAC Filter
See page...
C-34
C-35
C-37
C-38
C-38
C-39
C-20
C-22
December 2000