[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference netcad::hub_mgnt

Title:DEChub/HUBwatch/PROBEwatch CONFERENCE
Notice:Firmware -2, Doc -3, Power -4, HW kits -5, firm load -6&7
Moderator:NETCAD::COLELLADT
Created:Wed Nov 13 1991
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:4455
Total number of notes:16761

1306.0. "Can DB900 set up source address filtering?" by TKTVFS::KOBAYASHI_S (Seiki Kobayashi, Network support/JAPAN) Fri Aug 12 1994 10:55

Hello,

I have a question about DECbridge900MX filtering function.

My customer wants to do source address filtering on DECbridge900MX. The customer
configuration is the following.

	Station A --- FDDI --- DFECbridge900MX
          and               port2|    port3|    
        Station B                |         |     
                                 |         |  
                                 |         +---------+Station D
                                 +-----Ethernet------+Station C

The Station A and Station B sends multicast packet to Station C,D. The 
customer wants to control traffics such the following.
              
	Station A ----- forward ----> Station C
		  ----- block   ----> Station D

	Station B ----- block   ----> Station C
		  ----- forward ----> Station D

I tried to set up the filter but it seems DECbridge900MX supports only 
destination address filter.

Can I set up the source address filter on DECbridge900MX?

Regards,

Seiki Kobayashi. Network Support/CSC/Tokyo
T.RTitleUserPersonal
Name
DateLines
1306.1It supports source address filteringNACAD2::BATTERSBYFri Aug 12 1994 14:154
    The DECbridge 900MX supports protocol filtering, destination
    address filtering, and source address filtering.
    
    Bob
1306.2destination, not source, filtering.SLINK::HOODI'd rather be at the KennebecFri Aug 12 1994 15:451
No.  It supports destination filtering.  Not source filtering.
1306.3HmmmmmmmmNACAD2::BATTERSBYFri Aug 12 1994 16:1115
    It's my understanding that the management address filtering model
    for the bridge provides for a "Allowed Ports" bit mask. When any
    db900mx port is placed in "manual mode" learning is not performed
    on that port. The source field of any packet received on such a 
    configured port must be management-specified to be allowed on this
    port for it to be forwarded. Also packets from any other port can be
    sent to a port configured in "manual mode" only if the destination
    address is managenment-specified for it to be forwarded.
    Additionally, if all ports are placed in manual mode, then both
    source and destination addresses of any packet received must be
    management-specified for it to be forwarded.
    So maybe we are not agreeing to the terminology of "source address
    filtering"
    
    Bob
1306.4NACAD::ANILFri Aug 12 1994 17:507
    SA filtering is supported, see 895.1.  However, you can't use
    the SA to control the destination of a packet (as your scenario
    seems to want).  Simply put, the bridge uses source filtering to
    control the source port for the source address and destination
    filtering to control the destination port for the destination address.
    
    Anil
1306.5Thanks!TKTVFS::KOBAYASHI_SSeiki Kobayashi, Network support/JAPANWed Aug 31 1994 01:220