Filter
Top Products
30 Intel® NetStructure™ ZT 8101 10/100 Ethernet Switch User’s Manual
Switch Management and Operating Concepts
— Destination only
— Source or Destination
• Physical port— Set Priority level for all ingress frames on a physical port
• 802.1p—802.1p priority bits are part of an IEEE 802.1Q VLAN tagged Ethernet frame. When
a frame arrives at the switch, the 802.1p priority field is examined and is mapped to a hardware
queue. By default, 802.1p priority information is not replaced or manipulated, and the
information observed on ingress is preserved when transmitting the frame.
Filtering
A filtering database is used to segment the network and control communication between segments.
It can also filter packets off the network for intrusion control. Static filtering entries can be made by
MAC or IP addresses.
Each port on the switch is a unique collision domain, and the switch filters (discards) packets
whose destination lies on the same port as where it originated. This keeps local packets from
disrupting communications on other parts of the network.
The switch does some filtering automatically:
• Dynamic filtering—The switch automatically learns and ages MAC addresses and their
location on the network. Filtering occurs to keep local traffic confined to its segment.
• Filtering done by the Spanning Tree Protocol—STP filters packets based on topology,
ensuring that signal loops don't occur.
• Filtering done for VLAN integrity—The switch filters packets from a member of a VLAN
(VLAN 2, for example) destined for a device on another VLAN (VLAN 3).
You can also manually configure the switch to drop packets from specified MAC and IP addresses.
Whenever a switch encounters a packet originating from, or destined to, a MAC address or an IP
address entered into the filter table, the switch discards the packet.
MAC Address Filtering
When filtering by MAC address, you have two options:
• Static—This option allows you to specify which port handles the packets from the specified
MAC address.
• BlackHole—This option allows you to have the switch drop the packets from, or to, a
specified MAC address.
IP Address Filtering
When filtering by IP address, you have three options. You can have the switch drop the packet
based on where the IP address appears in the
• Source
• Destination
• Source and destination