| T.R | Title | User | Personal
Name | Date | Lines |
|---|
| 1879.1 | Like most filters.... | CGOOA::PITULEY | Ain't technology wonderful? | Thu Jan 12 1995 17:23 | 6 |
| I rather suspect that the filters are only active against incoming
traffic.......
Brian Pituley
NPC, Calgary
|
| 1879.2 | How filter on Destination address | SOS6::PEYRACHE | Jean-Yves Peyrache Country Support Group France | Fri Jan 13 1995 12:52 | 12 |
|
thanks,
more details will be appreciated , i don't understand
how to filter for destination address, because for me this kind
of filter is only an source address filter
any input will be welcomed
jean-yves
|
| 1879.3 | DECswitch SA/DA Filtering | DELNI::PIEPER | | Wed Feb 22 1995 14:17 | 24 |
| Please understand that address filtering on the DECswitch 900EE and the
DECswitch 900EF and the PEswitch 900TX works as follows:
o Source Address (SA) filtering on INBOUND traffic only
o Destination Address (DA) filtering on OUTBOUND traffic only
Therefore when you specify an SA filter on a specific port, it will
only check packets coming from a LAN INTO the switch. It will NOT be
checking packets coming from the bridge OUT onto a particular LAN.
The DA filters work similarly. If you specify a DA filter on a
particular port, all OUTGOING traffic (packets exiting the switch via
that port) will be checked for that DA address. NO INCOMING packets
(coming from the LAN into the switch) will be checked for that DA.
So you can block a specific Source Address from gaining access to the
switch and you can block a particular destination address from exiting
a particular LAN port with the address filtering. This was done to
keep the throughput performance of the switch high.
I realize that some customers want more flexibility with filtering but
we hope to address those needs in the future with a flexible VLAN
capability
|
| 1879.4 | c'est clair maintenant | SZAJBA::PEYRACHE | Jean-Yves Peyrache Country Support Group France | Thu Feb 23 1995 04:18 | 7 |
| thanks karl,
now it's clear,
may be the help files need to be updated ..
jean-yves
|
| 1879.5 | But, if you specify a DA, you have also specified an SA. | SLINK::HOOD | This is my new personal name for Notes | Thu Feb 23 1995 09:41 | 7 |
| Also remember that you cannot specify an address filter as a DA filter or
as an SA filter. Each address filter for the DECbridge 900MX, DECswitch
900EE, 900EF, or PEswitch 900TX, or RoamAbout Access Point is used as
*both* a DA filter *and* an SA filter.
Tom Hood
HUBwatch
|
| 1879.6 | Look at the Bridging/Switching Products on the DECHUB home page | NETCAD::BATTERSBY | | Thu Feb 23 1995 10:10 | 7 |
| There is also a well written description of the filtering
features of the DECswitch/PEswitch products in the DECHUB
WEB home page at....
http://www-dechub.lkg.dec.com/internal-info/switches/filtering.html
Bob
|
| 1879.7 | | CSC32::MACGREGOR | Colorado: the TRUE mid-west | Mon Nov 13 1995 10:34 | 23 |
|
Below is my attempt at a correction to .3 bearing in mind that there
are NOT two different filters (Source Address and Destination Address).
o Address Filtering
Configures the bridge so that an address is "not allowed" to
communicate through the bridge. Filtering this address will
result in the following:
o Source Address (SA) filtering on INBOUND traffic only
o Destination Address (DA) filtering on OUTBOUND traffic only
In other words, if the address is seen in the Source Address
field of the packet, the packet will be filtered on its way
into the bridge and thus not allowed onto the bridge. If the
address is seen in the Destination Address field of the packet,
the packet will be filtered on its way out of the bridge and thus
not put on the wire.
Marc (putting modified .3 into STARS)
|