Foundry Networks Switch and Router Installation And Configuration Manual page 911

USING THE CLI
To define the permit filter for HR on ports 10 and 14, enter the following commands:
BigIron(config)# interface e 10
BigIron(config-if-10)# no appletalk routing
BigIron(config-if-10)# appletalk permit zone HR
BigIron(config-if-10)# deny additional-zones
BigIron(config-if-10)# appletalk routing
BigIron(config-if-10)# int e 14
BigIron(config-if-14)# no appletalk routing
BigIron(config-if-14)# appletalk permit zone HR
BigIron(config-if-14)# appletalk routing
BigIron(config-if-14)# write memory
NOTE: You must disable AppleTalk routing on any interface already operating with AppleTalk before making any
modifications to the configuration, and then re-enable routing to activate the change.
USING THE WEB MANAGEMENT INTERFACE
To define the permit and deny filters discussed above:
1. Log on to the device using a valid user name and password for read-write access. The System configuration
dialog is displayed.
2. Click on the plus sign next to Configure in the tree view to expand the list of configuration options.
3. Click on the plus sign next to AppleTalk in the tree view to expand the list of AppleTalk option links.
4. Click on the Zone Filter link.
• If the device does not have any AppleTalk zone filters, the AppleTalk Zone Filter configuration panel is
displayed.
• If an AppleTalk zone filter is already configured and you are adding a new one, click on the Configure
AppleTalk Zone Filter link to display the AppleTalk Zone Filter configuration panel.
• If you are modifying an existing AppleTalk zone filter, click on the Modify button to the right of the row
describing the filter to display the AppleTalk Zone Filter configuration panel.
5. Select the interface for which the zone filter is to be defined from the port or slot/port pull down menu(s). In
this example, you are defining a permit zone filter for HR for interfaces 10 and 14, which have membership in
the Finance zone.
6. Enter the zone name to which access is to be permitted or denied. In this case, the zone name is HR.
7. Select either Deny or Permit. In this example, select Permit for interfaces 10 and 14.
8. Enable RTMP filtering to also filter on a network basis.
NOTE: When this filter is enabled on an interface, the denied network numbers are removed from the RTMP
packet before it is transmitted out of the interface. In this example, RTMP filtering is not desired, so this option
default is left as disabled.
9. Click the Apply button to apply the changes to the device's running-config file.
10. Click on the Additional Zone Filter link in the tree view.
11. Select the interface for which the zone filter is to be defined, from the port or slot/port pull down menu(s). In
this example, define a deny zone filter for interfaces 10 and 14 to deny all other zones not specified in the
permit zone filter (steps 1 – 6 above).
12. Select either Deny or Permit. For this example, select Deny for interfaces 10 and 14.
13. Disable RTMP filtering.
14. Click the Apply button to apply the changes to the device's running-config file.
December 2000
Configuring AppleTalk
24 - 13