User`s guide

Filters
5-23
Figure 5-2. Using Filters To Restrict Access To Specific Workstations
In this example, a combination port filter is configured which
instructs the ATX to discard data packets whose destination
address is F, G, or H. Therefore, the ATX will not pass any packets
from LAN 1 to LAN 2 if the packet's destination address is F, G, or
H (the addresses of the computers containing sensitive data).
To accomplish the filtering objective, a combination port filter is
required. This is because the filtering instruction must specify
three separate components which cannot be included in an address
table filter:
• Traffic from LAN 1
• Traffic destined for addresses F, G, and H on LAN 2
• Match flags for both components
This information is used to configure the filter as follows:
• Filter identifier – port number of the port attached to LAN 2 as
a destination.
POWER STATUS ENGINE STATUS TURBO STATUS SUPPLY A SUPPLY B 1.6 Gbps
RESET
PACKET PROCESSING ENGINE
NMS PORT
POWER
FastNET ATX
TM
OFFLINE
PROC
PWR
OCTAL IEEE 802.3 / ETHERNET 10BASE-T
3X 4X 5X 6X 7X 8X2X1X
SEGMENT
LINK
ACT
COL
12345678
OFFLINE
RING 1
RX ST
RING 2
RX ST
RING 3
RX ST
RING 4
RX ST PROC
TX 16 TX 16 TX 16 TX 16 PWR
QUAD IEEE 802.5 TOKEN RING (UTP)
OFFLINE
RX
LK
TX
QUAD FAST ETHERNET / 802.3 100BASE-FX
TX RX
SEGMENT 4SEGMENT 3SEGMENT 2 SEGMENT 1
RX
LK
TX
RX
LK
TX
RX
LK
TX
PROC
PWR
TX RX TX RX TX RX
OFFLINE
TX PWR
INTELLIGENT FDDI
RING A
RING B
THRU
WRAP RX
PROC
FDDI MIC A FDDI MIC BOPTICAL BYPASS
MULTI-MODE MULTI-MODE
OFFLINE
PROCRX
TX
PWR
QUAD IEEE 802.3 / ETHERNET 10BASE2
SEGMENT 4SEGMENT 3SEGMENT 2 SEGMENT 1
RX
TX
RX
TX
RX
TX
OFFLINE
PROCRX
TX
PWR
QUAD IEEE 802.3 / ETHERNET 10BASE2
SEGMENT 4SEGMENT 3SEGMENT 2 SEGMENT 1
RX
TX
RX
TX
RX
TX
ATX
Manufacturing Accounting
LAN 1
LAN 2
LAN 3 Computers that
cannot be accessed
by LAN 1 network
users
A B C D E F G H
I J K L