HP 6120XG HP ProCurve Series 6120 Blade Switches Access Security Guide - Page 444
Viewing a Named Source-Port Filter, Filter Name, Port List, NOT USED, Action
View all HP 6120XG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 444 highlights
Traffic/Security Filters and Monitors Filter Types and Operation A named source-port filter must first be defined and configured before it can be applied. In the following example two named source-port filters are defined, web-only and accounting. ProCurve(config)# filter source-port named-filter webonly ProCurve(config)# filter source-port named-filter accounting By default, these two named source-port filters forward traffic to all ports and port trunks. To configure a named source-port filter to prevent inbound traffic from being forwarded to specific destination switch ports or port trunks, the drop option is used. For example, on a 26-port switch, to configure the named source-port filter web-only to drop any traffic except that for destination ports 1 and 2, the following command would be used: ProCurve(config)# filter source-port named-filter webonly drop 3-26 A named source-port filter can be defined and configured in a single command by adding the drop option, followed by the required destination-port-list. Viewing a Named Source-Port Filter You can list all source-port filters configured in the switch, both named and unnamed, and their action using the show command below. Syntax: show filter source-port Displays a listing of configured source-port filters, where each filter entry includes a Filter Name, Port List, and Action: Filter Name: The filter-name used when a named source-port filter is defined. Non-named source-port filters are automatically assigned the port or port trunk number of the source port. Port List: Lists the port and port trunk destinations using the filter. Named source-port filters that are not in use display NOT USED. Action: Lists the ports and port trunks dropped by the filter. If a named source-port filter has been defined but not configured, this field is blank. [ index ] For the supplied index (IDX) displays the action taken (Drop or Forward) for each destination port on the switch. 11-8