Cisco Systems BC-109 Manual De Usuario

Descargar
Página de 56
Secure the SRB Network
BC-136
Bridging and IBM Networking Configuration Guide
To enable filtering on input or output, use one of the following commands in interface configuration 
mode:
You can filter SNAP-encapsulated packets on either input or output. The access list you specify is 
the one you created that includes the protocol type codes. 
To enable filtering on input or output, use one of the following commands in interface configuration 
mode:
Filter Frames by Vendor Code
To configure administrative filters by vendor code or address, define access lists that look for Token 
Ring addresses or for particular vendor codes for administrative filtering. To do so, use the following 
command in global configuration mode:
Filter Source Addresses
To configure filtering on IEEE 802 source addresses, assign an access list to a particular input 
interface for filtering the Token Ring or IEEE 802 source addresses. To do so, use the following 
command in interface configuration mode:
Filter Destination Addresses
To configure filtering on IEEE 802 destination addresses, assign an access list to a particular output 
interface. To do so, use the following command in interface configuration mode:
Command
Purpose
source-bridge input-lsap-list access-list-number
Enable filtering of IEEE 
802-encapsulated packets on input by 
type code.
source-bridge output-lsap-list access-list-number
Enable filtering of IEEE 
802-encapsulated packets on output 
by type code.
Command
Purpose
source-bridge input-type-list access-list-number
Filter SNAP-encapsulated packets on 
input by type code.
source-bridge output-type-list access-list-number
Filter SNAP-encapsulated frames on 
output by type code.
Purpose
Command
access-list
 
access-list-number
 
{permit | deny}
 
address 
mask 
Configure vendor code access lists.
Command
Purpose
source-bridge input-address-list access-list-number 
Enable filtering on IEEE 802 source 
addresses.
Command
Purpose
source-bridge output-address-list access-list-number
Enable filtering on IEEE 802 
destination addresses.