Configuring Permanent Address Filters
Use the Address Filter
Add/Modify window to configure a permanent address filter. The main tasks you must
perform are:
Step |
Action |
1 |
Identify the address to be filtered, and
the ports on which the address is allowed. |
2 |
Enable or disable multicast rate limiting
(multicast addresses only). |
For an introduction to address filtering, see About Address Filtering.
Identifying the Address and Allowed Ports
The addresses you specify when creating a filter are added to the line card's
permanent database (NVRAM).
Procedure:
Step |
Action |
1 |
From the Address Filter window, locate the
MAC address for which you want to create or modify a filter and click Add. |
2 |
Enter the type of MAC address
associated with this address filter (permanent or temporary). |
3 |
If this MAC address is a
duplicate address, select Yes in the drop-down box; if not, select No. If this address is
not a unicast address, specify Not Applicable. |
4 |
If the address is a multicast
address, enable multicast rate limiting. See Enabling and Disabling Multicast Rate Limiting
for more information. |
5 |
Enter the bridge ports to
which you want the packet with the specified MAC address forwarded. (The packet is
filtered from those ports not entered.) Enter None if you want the packet filtered
from all ports. Enter all if you want the packet allowed on all ports. You can list
the forwarding ports individually by separating each with a comma (for example, 0,1,2,3,4,5)
or you can enter a range of ports by separating the first and last port numbers in the
range with a hyphen (for example, 0-5). You can also combine a list of individual
entries with a range of entries (for example, 0-4,6,7). Spaces are not permitted
between port numbers and the comma or hyphen. |
Enabling and Disabling Multicast Rate
Limiting
Multicast rate limiting is used to minimize the
effects of multicast storms. You can restrict multicast storms, consisting of packets that
have a specific destination MAC address, to that segment of the network from which the
packets are generated. You do so by setting the maximum number of those packets the line card
is to forward per second, and by enabling rate limiting.
Rate limiting is enabled on both a per-address
basis and a line card-wide basis. This section provides instructions about how to enable or
disable rate limiting on a per MAC address basis.
See Enabling and Disabling line card-wide Rate Limiting
for information about setting the maximum number of packets per second and enabling or
disabling rate limiting on a line card-wide basis.
Field Descriptions
Learned
Port |
Port on which the MAC address was learned
(dynamic, unicast static, and unicast permanent addresses only). |
Rate
Limiting |
Operational state of multicast rate
limiting (enabled or disabled). |
Last Seen
Port |
Last port on which the specified MAC
address was seen (dynamic, unicast static, and unicast permanent addresses only). |
Rate Limit |
Maximum number of frames per second that
the line card is to forward destined for a particular MAC address, or that are of a
particular protocol type. The factory default is 400 frames per second. |
Address Filter Settings |
Mac
Address |
Sets the MAC address for which you want to create or
modify a filter. You can enter the address with or without hyphens separating the
octets. For example, you can enter 11-22-33-44-55-66 or 112233445566. |
Address
Type |
Sets the ype of MAC address associated with this
address filter (permanent or temporary). |
Duplicate
Address
(Only for Unicast Addresses) |
Unicast address that appears in more than one VLAN
Secure Domain (VSD). |
Multicast
Rate Limiting
(Only for Multicast Addresses) |
Sets the operational state of multicast rate
limiting: enabled, disabled, or not applicable. |
Allow
the Address on Ports |
Sets the bridge ports to which you want the packet with
the specified MAC address forwarded. (The packet is filtered from those ports not
entered.) Enter None if you want the packet filtered from all ports. Enter all
if you want the packet allowed on all ports. You can list the forwarding ports
individually by separating each with a comma (for example, 0,1,2,3,4,5) or you can
enter a range of ports by separating the first and last port numbers in the range with a
hyphen (for example, 0-5). You can also combine a list of individual entries with a
range of entries (for example, 0-4,6,7). Spaces are not permitted between port
numbers and the comma or hyphen. |
|