Alteon Application Switch Operating System Application Guide
Filtering and Traffic Manipulation
Document ID: RDWR-ALOS-V2900_AG1302 375
All clients from other VLANs are ignored.
2. Configure Filter 3 to allow local clients to telnet anywhere outside the local intranet and then
assign VLAN 30 to the filter.
The filter must recognize and allow TCP traffic to reach the local client destination IP addresses if
originating from a Telnet source port.
3. Configure Filter 2048 to deny traffic and then assign VLAN 70 to the filter. As a result, ingress
traffic from VLAN 70 is denied entry to Alteon.
4. Assign VLAN-based filters to an SLB port.
Before the filters can be used, they must be assigned to an SLB port.
>> Filter 2# vlan 20
(Assign VLAN 20 to Filter 2)
>> Filter 2# ena
(Enable the filter)
>> # /cfg/slb/filt 3
(Select the menu for Filter 3)
>> Filter 3# sip any
(From any source IP address)
>> Filter 3# dip 205.177.15.0
(To base local network destination
address)
>> Filter 3# dmask 255.255.255.0
(For entire subnet range)
>> Filter 3# proto tcp
(For TCP protocol traffic)
>> Filter 3# sport telnet
(From a Telnet port)
>> Filter 3# dport any
(To any destination port)
>> Filter 3# action allow
(Allow matching traffic to pass)
>> Filter 3# name allow clients to telnet
(Provide a descriptive name for the
filter)
>> Filter 3# vlan 30
(Assign VLAN 30 to Filter 3)
>> Filter 3# ena
(Enable the filter)
>> # /cfg/slb/filt 2048
(Select the menu for Filter 2048)
>> Filter 2048# sip any
(From any source IP address)
>> Filter 2048# dip 205.177.15.0
(To base local network destination
address)
>> Filter 2048# dmask 255.255.255.0
(For entire subnet range)
>> Filter 2048# proto tcp
(For TCP protocol traffic)
>> Filter 2048# sport http
(From a Telnet port)
>> Filter 2048# dport any
(To any destination port)
>> Filter 2048# action deny
(Allow matching traffic to pass)
>> Filter 2048# vlan 70
(Assign VLAN 70 to Filter 2048)
>> Filter 2048# ena
(Enable the filter)
>> # /cfg/slb/port 10
(Select the menu for the port in use)
>> SLB Port 10# add 2
(Add Filter 2 to SLB Port 10)