3com 2200 用户手册

C

HAPTER

 12: C

REATING

 

AND

 U

SING

 P

ACKET 

F

ILTERS

When you create packet filters using an external text editor, you must load 
the filters onto the system from the network host on which you created 
them. Once loaded, the packet filter definition is converted into the internal 
format that is used by the packet filter code in the system.

To load a packet filter:

1 From the top level of the Administration Console, enter:

You are prompted for a host IP address, file path name, user name, and 
password. To use the value in brackets, press [Return] at any prompt.

2 Enter the host IP address.

3 Enter the path name.

4 Enter your user name.

5 Enter your password.

The packet filter is loaded onto the Switch 2200.

Any syntax errors in the packet filter definition are reported to you at this 
time. See Appendix A: Packet Filter Opcodes, Examples, and Syntax Errors for a 
description of these errors. If errors are detected, you are offered the option 
of editing the filter definition or terminating the load. 

The load might fail if the system has insufficient nonvolatile RAM to store 
the filter. In this case, an error message tells you that the system did not 
accept the load. 

To assign a packet filter to one or more ports, the packet filter must reside 
on the system. Each path (transmit all, transmit multicast, receive all, and 
receive multicast) of a port can have only one packet filter assigned to it; 
however, you can assign a single packet filter to multiple paths and ports. 

Placing a filter on the transmit path confines the packet to the segment it 
originated from if it does not meet the forwarding criteria. Placing a filter on 
the receive path prohibits a packet from accessing certain segments unless 

system
ethernet
fddi

➧

bridge
ip
snmp
analyzer
script
logout

display
ipFragmentation
ipxSnapTranslation
addressThreshold
agingTime
stpState
stpPriority
stpMaxAge
stpHelloTime
stpForwardDelay
stpGroupAddress
port

➧

packetFilter

list
display
create
delete
edit

➧

load
assign
unassign
addressGroup
portGroup