Access Security Guide K/KA/KB.15.15

Figure 321 Showing Network Traffic Management with Source Port Filters
We next apply the updated named source-port filters to the appropriate switch ports. As a port
can only have one source-port filter (named or not named), before applying the new named
source-port filters we first remove the existing source-port filters on the port.
Figure 322 No filter source-port
The named source-port filters now manage traffic on the switch ports as shown below, using the
show filter source-port command.
Figure 323 Named Source-Port Filters Managing Traffic
Configuring traffic/security filters
Use this procedure to specify the type of filters to use on the switch and whether to forward or drop
filtered packets for each filter you specify.
1. Select the static filter type(s).
2. For inbound traffic matching the filter type, determine the filter action you want for each
outbound (destination) port on the switch (forward or drop). The default action for a new filter
is to forward traffic of the specified type to all outbound ports.
3. Configure the filter.
4. Use show filter (page 12-22) to check the filter listing to verify that you have configured correct
action for the desired outbound ports.
Configuring a source-port traffic filter
Syntax
[no][source-port<port-number|trunk-name>]
Specifies one inbound port or trunk. Traffic received inbound on this interface from
other devices will be filtered. The no form of the command deletes the sourceport
filter for < port-number > and returns the destination ports for that filter to the Forward
action. (Default: Forward on all ports.)
Configuring traffic/security 431