User Manual UMN:CLIV58082197.14 MAC FilteringIt is possible to forward frame to MAC address of destination. Without specificperformance degradation, maximum 4096 MAC addresses can be registered.7.14.1 Default MAC Filter PolicyThe basic policy of filtering based on system is set to allow all packets for each port.However, the basic policy can be changed for user’s requests.After configuring basic policy of filtering for all packets, use the following command.Command Mode Descriptionmac-filter default-policy {deny |permit} PORTS Bridge Configures basic policy of MAC Filtering in specifiedport.By default, basic filtering policy provided by system is configured to permit all packets ineach port.Sample ConfigurationThis is an example of blocking all packets in port 6 to 7 and port 8.SWTICH(bridge)# mac-filter default-policy deny 6-8SWTICH(bridge)# show mac-filter default-policy-------------------------PORT POLICY | PORT POLICY------------+------------1 PERMIT | 2 PERMIT3 PERMIT | 4 PERMIT5 PERMIT | 6 DENY7 DENY | 8 DENY9 PERMIT | 10 PERMIT11 PERMIT | 12 PERMIT13 PERMIT | 14 PERMIT15 PERMIT | 16 PERMIT17 PERMIT | 18 PERMITSWTICH(bridge)#7.14.2 Configuring MAC Filter PolicyYou can add the policy to block or to allow some packets of specific address afterconfiguring the basic policy of MAC Filtering. To add this policy, use the followingcommands in Bridge Configuration mode.Command Mode Descriptionmac-filter add MAC-ADDR {deny| permit} [<1-4094>] [PORTS] Bridge Allows or blocks packet which brings a specified MACaddress to specified port.i
