User Manual
UMN:CLI
V8102
227
7.14
MAC Filtering
It is possible to forward frame to MAC address of destination. Without specific perfor-
mance degradation, maximum 4096 MAC addresses can be registered.
7.14.1
Default MAC Filter Policy
The basic policy of filtering based on system is set to allow all packets for each port.
However, the basic policy can be changed for user
’s requests.
After configuring basic policy of filtering for all packets, use the following command.
Command
Mode
Description
mac-filter default-policy
{
deny
|
permit
}
Interface
[GE/XE/GPON]
Configures basic policy of MAC Filtering in
specified port.
By default, basic filtering policy provided by system is configured to permit all packets in
each port.
Sample Configuration
This is an example of blocking all packets in port 6 to 7 and port 8.
SWTICH(config-if)#
mac-filter default-policy deny 6-8
SWTICH(config-if)#
show mac-filter default-policy
-------------------------
PORT POLICY | PORT POLICY
------------+------------
1 PERMIT | 2 PERMIT
3 PERMIT | 4 PERMIT
5 PERMIT | 6 DENY
7 DENY | 8 DENY
9 PERMIT | 10 PERMIT
11 PERMIT | 12 PERMIT
13 PERMIT | 14 PERMIT
15 PERMIT | 16 PERMIT
17 PERMIT | 18 PERMIT
SWTICH(config-if)#
7.14.2
Configuring MAC Filter Policy
You can add the policy to block or to allow some packets of specific address after config-
uring the basic policy of MAC Filtering. To add this policy, use the following commands.
Command
Mode
Description
mac-filter add
MAC-ADDR
{
deny
|
permit
} <1-4094>
Interface
[GE/XE/GPON]
Allows or blocks packet which brings a speci-
fied MAC address to specified port.
MAC-ADDR: MAC address
i
