HP E3800 Series, Access Security Manual

Page: 562 / 732

12-14
Traffic/Security Filters and Monitors
Filter Types and Operation
Figure 12-12. Named Source-Port Filters Managing Traffic
Static Multicast Filters
This filter type enables the switch to forward or drop multicast traffic to a
specific set of destination ports. This helps to preserve bandwidth by reducing
multicast traffic on ports where it is unnecessary, and to isolate multicast
traffic to enhance security.
You can configure up to 16 static multicast filters (defined by the
filter
command—page 12-20). However, if an IGMP-controlled filter for a joined
multicast group has the same multicast address as a static multicast filter
configured on a given port, the IGMP-controlled filter overrides the static
multicast filter configured on that port. Note that in the default configuration,
IGMP is disabled on VLANs configured in the switch. To enable IGMP on a
specific VLAN, use the
vlan < vid > ip igmp
command. (For more on this
command, refer to the chapter titled “Multimedia Traffic Control with IP
Multicast (IGMP)” in the
Multicast and Routing Guide for your switch.)
The total of static multicast filters and IGMP multicast filters together can
range from 389 to 420, depending on the current
max-vlans setting in the
switch. If multiple VLANs are configured, then each filter is counted once per
VLAN in which it is used.
HP Switch(config)# show filter source-port
Traffic/Security Filters
Filter Name | Port List | Action
-------------------- + -------------------- + --------------------------
web-only | 2-6,9,14-26 | drop 2-26
accounting | 7-8,10-13 | drop 1-6,9,14-26
no-incoming-web | 1 | drop 7-8,10-13
HP Switch(config)#