7
U
SER
-
DEFINED
P
ACKET
F
ILTERING
The LANplex system allows you to add a second layer of packet filtering on
top of the standard filtering provided by a traditional transparent bridge.
This chapter contains the following information on user-defined packet
filters:
■
A general description
■
How to use address groups and port groups in packet filters
■
Some packet filters
■
How to administer user-designed packet filters
About
User-defined
Packet Filtering
User-defined packet filtering further restricts the packets to be forwarded
through the bridge. By taking advantage of this powerful feature, you can
improve network performance, provide additional security, or logically
segment your network to support virtual workgroups.
Designing a
Packet Filter
The packet filtering mechanism supported on the LANplex system is
flexible. You can define complex filters by combining many simple
comparisons. This flexibility allows you to use packet filters in several helpful
ways on your network.
You specify the packet filter using a
packet filter language
. This language
consists of operands and operators with which to compose your filters. The
language is described in detail in the
LANplex® 2500 Administration Console
User Guide
. Table 7-1 describes the two simplest operands in the packet
filter language.
Summary of Contents for LANPLEX 2500
Page 1: ...LANPLEX 2500 OPERATION GUIDE Part No 801 00344 000 Published November 1996 Revision 03...
Page 14: ......
Page 18: ...1 4 CHAPTER 1 LANPLEX MANAGEMENT AND ADMINISTRATION OVERVIEW...
Page 78: ...III Chapter 9 FDDI Overview and Implementation Chapter 10 FDDI Networks FDDI TECHNOLOGY...
Page 97: ...IV Chapter 11 ATM Networks ATM TECHNOLOGY...
Page 116: ...V Appendix A SNMP MIB Support Appendix B Technical Support APPENDIXES...