Foundry Switch and Router Installation and Configuration Guide
C - 24 December 2000
Layer 2 Filters
Layer 2 filters control a Foundry device’s receipt of packets based on MAC address information. Foundry devices
provide the following types of Layer 2 filters:
• MAC address filters
• Address-lock filters
MAC Filters
MAC filters forward or drop incoming packets based on the following information:
• Source MAC address
• Destination MAC address
• Encapsulation type and EtherType (optional)
A packet whose Layer 2 information matches the filter is either permitted (forwarded) or denied (dropped). You
define a MAC filter on the global level, then apply it to an interface. The filter applies only to incoming traffic on the
interface.
Action
MAC filters forward (permit) or drop (deny) packets.
Scope
You configure MAC filters globally, then apply them to individual ports. The filters do not take effect until applied
to specific ports. MAC filters apply only to incoming packets.
Syntax
Use the following CLI commands or Web management interface panels to configure MAC filters.
BGP AS-path filters X C-34
BGP community filters X C-35
RIP redistribution filters X C-37
OSPF redistribution filters X C-38
BGP redistribution filters X C-38
Layer 4 Filters C-39
TCP/UDP forwarding filters (same as TCP/UDP
access policies)
XXXC-20
Cache server redirection filters (same as cache
server redirection policies)
XC-22
Table C.11: MAC Filters
CLI syntax Web management links
BigIron(config)# mac filter <filter-num> permit | deny any | <H.H.H>
any | <H.H.H> etype | IIc | snap <operator> <frame-type>
BigIron(config-if-1/1)# mac-filter-group <filter-list>
Configure->MAC Filter
Table C.10: Foundry Filters (Continued)
Filter Type Supported on... See page...
Router Switch ServerIron