Configuring Permanent Address Filters

Use the Address Filter Add/Modify window to configure a permanent address filter.  The main tasks you must perform are:

Step Action
1 Identify the address to be filtered, and the ports on which the address is allowed.
2 Enable or disable multicast rate limiting (multicast addresses only).

For an introduction to address filtering, see About Address Filtering.

Identifying the Address and Allowed Ports

The addresses you specify when creating a filter are added to the module's permanent database (NVRAM). 

Procedure:

Step Action
1 From the Address Filter window, locate the MAC address for which you want to create or modify a filter and click Add.
2 Enter the type of MAC address associated with this address filter (permanent or temporary).
3 If this MAC address is a duplicate address, select Yes in the drop-down box; if not, select No. If this address is not a unicast address, specify Not Applicable.
4 If the address is a multicast address, enable multicast rate limiting.  See Enabling and Disabling Multicast Rate Limiting for more information.
5 Enter the bridge ports to which you want the packet with the specified MAC address forwarded. (The packet is filtered from those ports not entered.) Enter None if you want the packet filtered from all ports. Enter all if you want the packet allowed on all ports. You can list the forwarding ports individually by separating each with a comma (for example, 0,1,2,3,4,5) or you can enter a range of ports by separating the first and last port numbers in the range with a hyphen (for example, 0-5). You can also combine a list of individual entries with a range of entries (for example, 0-4,6,7). Spaces are not permitted between port numbers and the comma or hyphen.

 

Enabling and Disabling Multicast Rate Limiting

Multicast rate limiting is used to minimize the effects of multicast storms. You can restrict multicast storms, consisting of packets that have a specific destination MAC address, to that segment of the network from which the packets are generated. You do so by setting the maximum number of those packets the module is to forward per second, and by enabling rate limiting.

Rate limiting is enabled on both a per-address basis and a switch-wide basis. This section provides instructions about how to enable or disable rate limiting on a per MAC address basis.

See Enabling and Disabling Switch-Wide Rate Limiting for information about setting the maximum number of packets per second and enabling or disabling rate limiting on a switch-wide basis.

Field Descriptions

Learned Port Port on which the MAC address was learned (dynamic, unicast static, and unicast permanent addresses only).
Rate Limiting Operational state of multicast rate limiting (enabled or disabled).
Last Seen Port Last port on which the specified MAC address was seen (dynamic, unicast static, and unicast permanent addresses only).
Rate Limit Maximum number of frames per second that the module is to forward destined for a particular MAC address, or that are of a particular protocol type. The factory default is 400 frames per second.

 

Address Filter Settings
Mac Address Sets the MAC address for which you want to create or modify a filter.  You can enter the address with or without hyphens separating the octets.  For example, you can enter 11-22-33-44-55-66 or 112233445566.
Address Type Sets the ype of MAC address associated with this address filter (permanent or temporary).
Duplicate Address
(Only for Unicast Addresses)
Unicast address that appears in more than one VLAN Secure Domain (VSD).
Multicast Rate Limiting
(Only for Multicast Addresses)
Sets the operational state of multicast rate limiting: enabled, disabled, or not applicable. 
Allow the Address on Ports Sets the bridge ports to which you want the packet with the specified MAC address forwarded. (The packet is filtered from those ports not entered.) Enter None if you want the packet filtered from all ports. Enter all if you want the packet allowed on all ports. You can list the forwarding ports individually by separating each with a comma (for example, 0,1,2,3,4,5) or you can enter a range of ports by separating the first and last port numbers in the range with a hyphen (for example, 0-5). You can also combine a list of individual entries with a range of entries (for example, 0-4,6,7). Spaces are not permitted between port numbers and the comma or hyphen.