Cisco 7609 - Configuring Layer 3 Protocol Filtering on a Layer 2 LAN Interface; Verifying Layer 3 Protocol Filtering Configuration

27-3
Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E
78-14064-04
Chapter 27 Configuring Layer 3 Protocol Filtering on Supervisor Engine 1
Configuring Layer 3 Protocol Filtering
This example shows how to enable Layer 3 protocol filtering globally:
Router# configure terminal
Router(config)# protocol-filtering
Configuring Layer 3 Protocol Filtering on a Layer 2 LAN Interface
To configure Layer 3 protocol filtering on a Layer 2 LAN port, perform this task:
This example shows how to configure the protocol membership of Fast Ethernet port 5/8 to allow IPX
packets only, and verify the configuration:
Router(config)# interface fastethernet 5/8
Router(config-if)# switchport protocol appletalk off
Router(config-if)# switchport protocol ip off
Router(config-if)# switchport protocol ipx on
Verifying Layer 3 Protocol Filtering Configuration
To verify Layer 3 protocol filtering configuration, perform this task:
This example shows how to verify the Layer 3 protocol filtering configuration of Fast Ethernet port 5/8:
Router# show protocol-filtering interface fastethernet 5/8
Interface IP Mode IPX Mode Group Mode Other Mode
--------------------------------------------------------------------------
Fa5/8 OFF ON OFF OFF
Router#
Note The show protocol filtering command shows only ports that have at least one protocol set to the
nondefault configuration.
Command Purpose
Step 1
Router(config)# interface {{type
1
slot/port} |
{port-channel number}}
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
Selects the interface to configure.
Step 2
Router(config-if)# switchport protocol {appletalk
| ip | ipx | group} {on | off | auto}
Configures Layer 3 protocol filtering on the LAN port.
Router(config-if)# no switchport protocol
{appletalk | ip | ipx | group}
Clears Layer 3 protocol filtering configuration on the
LAN port.
Command Purpose
Router# show protocol-filtering interface
{{type
1
slot/port} | {port-channel number}}
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
Verifies the interface filtering configuration.