Enterasys Networks CSX7000 Bedienungsanleitung PDF herunterladen (Seite 279)

100

101

Central Site Remote Access Switch 279

ONFIGURING

DVANCED

RIDGING

Bridge Filters

5. PROTOCOL protocol-Id FORWARD < distribution list >

This filter allows you to restrict packets based on the Ethernet protocol Id field or the

corresponding 802.3 LSAP field. You can specify the protocol Id that is to be forwarded. The

filtering mechanism will determine if the packet is Ethernet format or 802.3 format. The

Ethernet type or LSAP field will be checked based on packet format.

6. PROTOCOL protocol-Id CONNECT < distribution list >

This filter allows you to restrict packets based on the Ethernet protocol Id field or the

corresponding 802.3 LSAP field. You can specify the protocol Id that is to be connected and

then forwarded. The filtering mechanism will determine if the packet is Ethernet format or

802.3 format. The Ethernet type or LSAP field will be checked based on packet format. See the

section titled Protocol Definitions for more information.

7. PACKET OFFSET dd MASK xxxxxxxxxxxx VALUE xxxxxxxxxxxx FORWARD

<distribution-list>

This filter allows you to restrict packets based on packet data outside the source and

destination MAC addresses or protocol Id. For example, you may wish to filter packets based

on IP address information. You would then specify the offset (dd) into the MAC frame where

the filter comparison is to begin. The mask data indicates which bits within the frame data are

significant and will be compared to the value. The frame data is logically “anded” with the

mask, and then compared to the specified value. The value field must be a subset of the mask

field. That is, the value field logically “anded” with the mask field must equal the value field.

The value and mask fields must have equal lengths.

8. PACKET OFFSET dd MASK xxxxxxxxxxxx VALUE xxxxxxxxxxxx CONNECT

<distribution-list>

This filter allows you to restrict packets based on packet data outside the source and

destination MAC addresses or protocol Id. For example, you may wish to filter packets based

on IP address information. You would then specify the offset (dd) into the MAC frame where

the filter comparison is to begin. The mask data indicates which bits within the frame data are

significant and will be compared to the value. The frame data is logically “anded” with the

mask, and then compared to the specified value. The value field must be a subset of the mask

field. That is, the value field logically “anded” with the mask field must equal the value field.

The value and mask fields must have equal lengths.

9. PACKET OFFSET dd MASK xxxxxxxxxxxx VALUE xxxxxxxxxxxx DISCARD <distribution-

list>

This filter allows you to specify the DISCARD filter action on a packet data filter. This gives you

the flexibility of allowing a global class of data to be forwarded, and restrict specific subsets of

that data. For example you may forward all IPX data packets but restrict workstation watchdog

packets.

1 2 ... 274 275 276 277 278 279 280 281 282 283 284 ... 728 729

Kommentare zu diesen Handbüchern

Keine Kommentare

Enterasys Networks CSX7000 Bedienungsanleitung Seite 279

Kommentare zu diesen Handbüchern