Cisco 7609 User Manual

CHAPTER
27-1
Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E
78-14064-04
27
Configuring Layer 3 Protocol Filtering on
Supervisor Engine 1
Note Layer 3 protocol filtering is supported with Supervisor Engine 1. Layer 3 protocol filtering is not
supported with Supervisor Engine 2.
This chapter describes how to configure Layer 3 protocol filtering on Layer 2 LAN ports on the
Catalyst 6500 series switches.
Note For complete syntax and usage information for the commands used in this chapter, refer to the
Cisco 7600 Series Router Cisco IOS Command Reference publication.
This chapter consists of these sections:
• Understanding How Layer 3 Protocol Filtering Works, page 27-1
• Configuring Layer 3 Protocol Filtering, page 27-2
Understanding How Layer 3 Protocol Filtering Works
Layer 3 protocol filtering prevents specific Layer 3 protocol packets from being received or transmitted
on a Layer 2 LAN port, which reduces the broadcast domain of specific protocols in a VLAN. For
example, you can configure a Layer 2 LAN port in a VLAN to allow IP packets only, while another
Layer 2 LAN port in the same VLAN allows both IP and Internetwork Packet Exchange (IPX) packets.
Layer 2 LAN trunk ports do not support protocol filtering. You can configure Layer 3 protocol filtering
on a trunk, but the configuration is ignored while the port is a trunk.
Protocol filtering cannot be configured on Layer 3 interfaces—only nontrunk Layer 2 LAN ports support
Layer 3 protocol filtering.
Layer 3 protocol filtering does not support the features available with standard and extended Cisco IOS
ACLs.
Layer 2 protocols, such as Spanning Tree Protocol (STP) and Cisco Discovery Protocol (CDP), are not
affected by Layer 3 protocol filtering. Layer 2 LAN ports that have port security enabled are members
of all protocol groups.

Cisco 7609 Specifications

General

Chassis Slots	9
Switch Fabric Capacity	720 Gbps
Power Supply Options	AC or DC
Product Type	Router
Form Factor	Rack-mountable
Supported Line Cards	Various Cisco 7600 Series line cards
Operating System	Cisco IOS
Management	CLI, SNMP
Forwarding Performance	400 Mpps
Maximum Power Consumption	4000 Watts
Redundancy	Yes
Interfaces/Ports	Various, depending on line cards installed

Summary

Product Overview

Configuring Embedded CiscoView Support

Describes the Embedded CiscoView support available with Release 12.1(20)E and later releases.

Command-Line Interfaces

Accessing the CLI

Describes accessing the CLI through the EIA/TIA-232 Console Interface and Telnet.

Configuring the Cisco 7600 Series Router for the First Time

Default Configuration

Shows the default configuration for the Cisco 7600 Series Router.

Configuring EHSA Supervisor Engine Redundancy

Supervisor Engine Redundant Operation

Describes how EHSA redundant operation works.

Configuring RPR and RPR+ Supervisor Engine Redundancy

Understanding Supervisor Engine Redundancy

Describes supervisor engine redundancy.

Configuring Interfaces

Understanding Interface Configuration

Explains how to configure interfaces on a per-interface basis.

Configuring LAN Ports for Layer 2 Switching

Understanding How Layer 2 Switching Works

Describes how Layer 2 switching works on Cisco 7600 series routers.

Configuring VTP

Understanding How VTP Works

Explains VTP as a Layer 2 messaging protocol that maintains VLAN configuration consistency.

Configuring VLANs

Understanding How VLANs Work

Describes how VLANs work on Cisco 7600 series routers.

Configuring Private VLANs

Understanding How Private VLANs Work

Describes how private VLANs work and their port types.

Configuring Cisco IP Phone Support

Understanding Cisco IP Phone Support

Describes Cisco IP Phone support, connections, voice, data, and power configurations.

Configuring Layer 3 Interfaces

Configuring IP Routing and Addresses

Provides information on configuring Layer 3 interfaces and IP addresses.

Configuring EtherChannels

Understanding How EtherChannels Work

Describes how EtherChannels work, including bundling individual Ethernet links.

Configuring IEEE 802.1Q Tunneling and Layer 2 Protocol Tunneling

Understanding How 802.1Q Tunneling Works

Explains how 802.1Q tunneling enables service providers to support customer VLANs while preserving IDs.

Configuring STP and IEEE 802.1s MST

Understanding How STP Works

Describes how STP works, providing path redundancy and preventing loops.

Configuring Optional STP Features

Understanding How PortFast Works

Explains STP PortFast, which allows Layer 2 LAN interfaces to enter forwarding state immediately.

Configuring IP Unicast Layer 3 Switching on Supervisor Engine 2

Understanding How Layer 3 Switching Works

Describes Layer 3 switching with PFC2 and DFCs.

Configuring IP Multicast Layer 3 Switching

Understanding How IP Multicast Layer 3 Switching Works

Describes how IP multicast Layer 3 switching works.

Configuring IP Unicast Layer 3 Switching on Supervisor Engine 1

Understanding How IP MLS Works

Describes how IP MLS works.

Configuring IPX Unicast Layer 3 Switching on Supervisor Engine 1

Understanding How IPX MLS Works

Describes how IPX MLS works.

Configuring IGMP Snooping

Understanding How IGMP Snooping Works

Describes how IGMP snooping works.

Configuring RGMP

Understanding How RGMP Works

Describes how RGMP works.

Configuring Network Security

ACL Configuration Guidelines

Provides guidelines for Access Control List (ACL) configurations.

Configuring Denial of Service Protection

DoS Protection Overview

Explains the DoS protection available on the Cisco 7600 series router.

Configuring IEEE 802.1X Port-Based Authentication

Understanding 802.1X Port-Based Authentication

Describes the IEEE 802.1X port-based authentication protocol.

Configuring Port Security

Understanding Port Security

Describes the port security feature to restrict input to an interface.

Configuring Layer 3 Protocol Filtering on Supervisor Engine 1

Understanding How Layer 3 Protocol Filtering Works

Explains how Layer 3 protocol filtering prevents specific Layer 3 protocol packets.

Configuring Traffic Storm Control

Understanding Traffic Storm Control

Describes how traffic storm control prevents LAN ports from disruption by storms.

Configuring Broadcast Suppression

Understanding How Broadcast Suppression Works

Describes how broadcast suppression prevents LAN interfaces from disruption.

Configuring CDP

Understanding How CDP Works

Describes CDP as a protocol that runs over Layer 2.

Configuring UDLD

Understanding How UDLD Works

Describes how UDLD works.

Configuring PFC QoS

Understanding How PFC QoS Works

Describes how PFC QoS works.

Configuring NDE

Understanding How NDE Works

Describes how NetFlow Data Export (NDE) works.

Configuring Local SPAN and RSPAN

Understanding How Local SPAN and RSPAN Work

Describes how local SPAN and RSPAN work.

Configuring Web Cache Services Using WCCP

Understanding WCCP

Describes the Web Cache Communication Protocol (WCCP).

Configuring SNMP IfIndex Persistence

Understanding SNMP IfIndex Persistence

Describes the SNMP ifIndex persistence feature.

Configuring the Switch Fabric Module

Understanding How the Switch Fabric Module Works

Describes how the Switch Fabric Module works.

Power Management and Environmental Monitoring

Understanding How Power Management Works

Describes the power management features.

Appendix A Acronyms