Conference 7.286::fddi

714.0. "Two-way filter on multi-port Bridge?" by OSLACT::BJORN (Woops, now I have to learn changing diper's) Fri Sep 18 1992 11:24

I'm currently working with a customer who has set up default protocol filtering
on a DECbridge 610 on the FDDI port. The Ethernet ports are set up as default
disposition = forward.

They have set up protocol forwarding on the FDDI port for "our" protocols, i.e.
the ones found in the "LAN protocol Registry", registered as DEC's.

My question now is, in what direction is the filtering happening? Does FILTER
mean filtering from the FDDI ring into port 1? Does it mean filter in any
direction through port 1? The customer say that the bridge is forwarding data
out on FDDI port (port 1) that comes in on the Ethernet ports. Is this how it
works/should work? If that is the case, how do I set up filter out on port 1?
Is this possible?



FDDI-frame (with IP data) -------> DECbridge 610 ---->	filter ALL, but 
				   Port 1 		DEC's protocols


Ethernet-frame IP data  ---------> DECbridge 610 ----> 	Forward on port 1 to
				   port 3		FDDI
				   

The IP data is being sent ouit on the FDDI port, although we meant to filter it
away from being sent out on the FDDI-ring.

Bj�rn Olav Haugom

    The default behavior of a filter is bi-directional. This can be
    modified using the "Forward Ports" and "Forward Map" characterisitics.
    
    Can you post the DECmcc commands used to set up the protocol filters?

These commands are used to set default protocol filtering to TRUE for the
FDDI-port on a DECbridge 610, and then forward a few protocols.


$ MANAGE/ENTERPRISE
USE DEFAULT ENTITY BRIDGE myownbridge LINE 1
SET DEFAULT ETHERNET TYPE FILTERING=TRUE
SET DEFAULT SAP FILTERING=TRUE
SET DEFAULT SNAP FILTERING=TRUE
!
USE DEFAULT ENTITY BRIDGE myownbridge PROTOCOL DATABASE
CREATE ETHERNET ENTRY 60-01 DISPOSITION=FORWARD
CREATE ETHERNET ENTRY 60-02 DISPOSITION=FORWARD
CREATE ETHERNET ENTRY 60-03 DISPOSITION=FORWARD
	.
	.
	.
	.

    Commands look OK. If you've verified that the filters are actually
    there (by SHOWing them), I'd suggest working with your CSC to escalate
    a CLD.