Specifications

Device Management Page 44 SmartSwitch Router/X-Pedition Switch Router
Configuration Views Policy Configuration View
Type
The types of filters, as explained below.
static-entry - Based on the restrictions and
the presence of source and destination MAC
addresses, they can be of three types, as listed in
Table 9:
address-filter - Based on the restrictions
and the presence of source and destination MAC
addresses, they can be of three types as listed in
Table 10:
port-address-lock - This locks a source
address to a port. It allows learning of srcMAC
addresses only on any of the ports in inPorts. The
following fields are mandatory and must be set by
mgmt station to activate a row: polL2FilterDesc,
polL2FilterSrcMacAddr, polL2FilterInPorts
secure-port.
Table 9: Type = static-entry
Type Description
source-static-
entry
All frames with a source address equal
to “srcMAC,” coming through any of the
inPorts will be allowed/disallowed to go
to any port that is a member of the
outPorts list.
destination-
static-entry
All frames with a destination address
equal to “dstMAC,” coming through any
of the inPorts will be allowed/
disallowed/forced to go to any port that
is a member of the outPorts list.
flow-static-entry All frames with a source address equal
to “srcMAC” and a destination address
equal to “dstMAC,” coming through any
of the inPorts list will be allowed/
disallowed to go to any port that is a
member of the outPorts list. Ports must
be in flow-bridging mode in order to use
filters with both src and dst mac
specified.
Table 10: Type = address-filter
Type Description
source-address-
filter
All frames with a source address equal
to “srcMAC,” coming through any of the
inPorts will be filtered out.
destination-
address-filter
All frames with a destination address
equal to “dstMAC,” coming through any
of the inPorts will be filtered out.
flow-filter All frames with a source address equal
to “srcMAC” and a destination address
equal to “dstMAC,” coming through any
of the inPorts list will be filtered out.
Ports must be in flow mode in order to
set a filter using both source and
destination address.