Cisco Systems BC-109 Network Router User Manual


 
Secure the SRB Network
BC-136
Bridging and IBM Networking Configuration Guide
To enable filtering on input or output, use one of the following commands in interface configuration
mode:
You can filter SNAP-encapsulated packets on either input or output. The access list you specify is
the one you created that includes the protocol type codes.
To enable filtering on input or output, use one of the following commands in interface configuration
mode:
Filter Frames by Vendor Code
To configure administrative filters by vendor code or address, define access lists that look for Token
Ring addresses or for particular vendor codes for administrative filtering. To do so, use the following
command in global configuration mode:
Filter Source Addresses
To configure filtering on IEEE 802 source addresses, assign an access list to a particular input
interface for filtering the Token Ring or IEEE 802 source addresses. To do so, use the following
command in interface configuration mode:
Filter Destination Addresses
To configure filtering on IEEE 802 destination addresses, assign an access list to a particular output
interface. To do so, use the following command in interface configuration mode:
Command Purpose
source-bridge input-lsap-list access-list-number Enable filtering of IEEE
802-encapsulated packets on input by
type code.
source-bridge output-lsap-list access-list-number Enable filtering of IEEE
802-encapsulated packets on output
by type code.
Command Purpose
source-bridge input-type-list access-list-number Filter SNAP-encapsulated packets on
input by type code.
source-bridge output-type-list access-list-number Filter SNAP-encapsulated frames on
output by type code.
Purpose Command
access-list
access-list-number {permit | deny} address
mask
Configure vendor code access lists.
Command Purpose
source-bridge input-address-list access-list-number Enable filtering on IEEE 802 source
addresses.
Command Purpose
source-bridge output-address-list access-list-number Enable filtering on IEEE 802
destination addresses.