HP HP ProCurve Series 6600, Access Security Manual

Page: 590 / 778

12-2
Traffic/Security Filters and Monitors
Introduction
Introduction
You can enhance in-band security and improve control over access to network
resources by configuring static filters to forward (the default action) or drop
unwanted traffic. That is, you can configure a traffic filter to either forward
or drop all network traffic moving to outbound (destination) ports and trunks
(if any) on the switch.
Filter Limits
The switch accepts up to 101 static filters. These limitations apply:
■
Source-port filters: up to 78
■ Multicast filters: up to 16 with 1024 or fewer VLANs configured. Up to 8
with more than 1024 VLANs configured.
■
Protocol filters: up to 7
Using Port Trunks with Filters
The switch manages a port trunk as a single source or destination for source-
port filtering. If you configure a port for filtering before adding it to a port
trunk, the port retains the filter configuration, but suspends the filtering action
while a member of the trunk. If you want a trunk to perform filtering, first
configure the trunk, then configure the trunk for filtering. Refer to “Config-
uring a Filter on a Port Trunk” on page 12-18.
Feature Default Menu CLI WebAgent
configure source-port filters none n/a page 12-20 n/a
configure protocol filters none n/a page 12-20 n/a
configure multicast filters none n/a page 12-20 n/a
display filter data n/a n/a page 12-22 n/a