HP PROCURVE 2910AL, Руководство по обеспечению безопасности доступа

Страница: 436 / 594

Traffic/Security Filters and Monitors
Configuring Traffic/Security Filters
filter on port 5, then create a trunk with ports 5 and 6, and display the results,
you would see the following:
The *5* shows that port 5 is
configured for filtering, but the
filtering action has been suspended
while the port is a member of a trunk.
If you want the trunk to which port 5
belongs to filter traffic, then you must
explicitly configure filtering on the
trunk.
Note: If you configure an existing
trunk for filtering and later add
another port to the trunk, the switch
will apply the filter to all traffic moving
on any link in the trunk. If you remove
a port from the trunk it returns to the
configuration it had before it was
added to the trunk
Figure 11-14. Example of Switch Response to Adding a Filtered Source Port to a
Trunk
Editing a Source-Port Filter
The switch includes in one filter the action(s) for all destination ports and/or
trunks configured for a given source port or trunk. Thus, if a source-port filter
already exists and you want to change the currently configured action for
some destination ports or trunks, use the
filter source-port command to update
the existing filter. For example, suppose you configure a filter to drop traffic
received on port 8 and destined for ports 1 and 2. The resulting filter is shown
on the left in figure 11-15. Later, you update the filter to drop traffic received
on port 8 and destined for ports 3 through 5. Since only one filter exists for a
given source port, the filter on traffic from port 8 appears as shown on the
right in figure 11-15:
11-20