13-2 CHAPTER 13: CONFIGURING ADDRESS AND PORT GROUPS TO USE IN PACKET FILTERS
Port group packet
filter example
In this example, packets are not forwarded to ports in groups 3 and 8.
Name “Discard Groups 3 and 8”
pushSPGM # Get source port group mask
pushLiteral.l 0x0084 # Select bits 3 and 8
and # If port group bits 3 & 8 are common
# with SPGM, then non-zero value is
# pushed onto stack
pushLiteral.l 0 # Push zero
eq # Only if SPGM is not in port groups
# corresponding to bits 3 & 8, then
# packet is forwarded
In the Administration Console you can:
■ List the groups
■ Display specific information about a group
■ Create a new group
■ Delete a group
■ Copy a group from one module to another (address groups only)
■ Add and remove addresses and ports to or from a group
Listing Groups You can list the address and port groups currently defined for your Switch
2200 system. The group id, group name (if any), and group mask are
displayed.
1 For address groups, enter the following command from the top level of the
Administration Console:
bridge packetFilter addressGroup
OR, for port groups, enter the following command:
bridge packetFilter portGroup
2 To list the currently defined groups, enter this command:
list
The listing of address or port groups is displayed, as shown in the next
example.
Top-Level Menu
system
ethernet
fddi
➧bridge
ip
snmp
analyzer
script
logout
display
ipFragmentation
ipxSnapTranslation
addressThreshold
agingTime
stpState
stpPriority
stpMaxAge
stpHelloTime
stpForwardDelay
stpGroupAddress
port
➧packetFilter
list
display
create
delete
edit
load
assign
unassign
➧addressGroup
➧portGroup