[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference netcad::hub_mgnt

Title:DEChub/HUBwatch/PROBEwatch CONFERENCE
Notice:Firmware -2, Doc -3, Power -4, HW kits -5, firm load -6&7
Moderator:NETCAD::COLELLADT
Created:Wed Nov 13 1991
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:4455
Total number of notes:16761

1972.0. "FILTER on Address AND Protocol ?" by MARS03::THOMAS () Tue Feb 07 1995 12:03

	My customer wants to use filter on Protocol AND Address.

	For instance, he wants to authorize IP traffic across the bridge/switch
only from/to some stations thare are connected to a segment.

	Does our switches or bridges support such filters ? If yes which ones ?

	I don't think so but if there is a way ...

	Thank you for your answers.


	Regards,

	Bernard THOMAS
T.RTitleUserPersonal
Name
DateLines
1972.1SLINK::HOODI'd rather be at the PenobscotTue Feb 07 1995 13:442
GIGAswitch/FDDI allows such filtering, but the DEChub-based bridges and
switches do not.
1972.2OR if not AND?STKHLM::DUFVANils Dufva - TSSC G�vle SwedenFri Mar 31 1995 04:098
    Does this mean that filters are `ORed' instead of `ANDed'?
    
    So if I have filtered out, say, IP traffic with a protocol filter, it may
    pass because it is allowed by an address filter?
    
    (Yes, I have ruminated upon this since february!)
    
    Nils
1972.3Not ANDed.SLINK::HOODApril showers bring vacation daysFri Mar 31 1995 15:339
If you set up a protocol filter for IP and set up an address filter for
address A, then neither IP nor A will be forwarded.  What the DECbridge
and DECswitch and PEswitch 900's will NOT let you do is:
	If address A sends IP, filter it.
	If address B sends IP, forward it.
To do that kind of filtering, you need a GIGAswitch.

Tom Hood
HUBwatch
1972.4Tnks!STKHLM::DUFVANils Dufva - TSSC G�vle SwedenMon Apr 03 1995 08:101