HP PROCURVE 2910AL, Access Security Manual

Page: 426 / 594

Traffic/Security Filters and Monitors
Filter Types and Operation
Defining and Configuring Example Named Source-Port Filters. While
named source-port filters may be defined and configured in two steps, this is
not necessary. Here we define and configure each of the named source-port
filters for our example network in a single step.
ProCurve(config)# filter source-port named-filter web-only drop 2-26
ProCurve(config)# filter source-port named-filter accounting drop 1-6,8,9,12-26
ProCurve(config)# filter source-port named-filter no-incoming-web drop 7,10,11
Ports and port trunks using the
ProCurve(config)# show filter source-port
filter. When NOT USED is
displayed the named source-port
filter may be deleted.
Traffic/Security Filters
| Port List | Action Filter Name
Lists the ports
-------------------- + -------------------- + -------------------------- and port trunks
web-only | NOT USED | drop 2-26
dropped by the
accounting | NOT USED | drop 1-6,8-9,12-26
filter. Ports and
port trunks not
no-incoming-web | NOT USED | drop 7,10-11
shown are
forwarded by the
ProCurve Switch 2626(config)#
filter.
To remove a port
or port trunk from
the list, update
the named
source-port filter
definition using
the
forward
option.
Figure 11-5. Applying Example Named Source-Port Filters
Once the named source-port filters have been defined and configured we now
apply them to the switch ports.
ProCurve(config)# filter source-port 2-6,8,9,12-26 named-filter web-only
ProCurve(config)# filter source-port 7,10,11 named-filter accounting
ProCurve(config)# filter source-port 1 named-filter no-incoming-web
ProCurve(config)#
Figure 11-6. Source Port Filters Applied to Switch Ports
The
show filter
command shows what ports have filters applied.
11-10