Restricting lan access, Canned filters – 3Com ADSL Modem Ethernet User Manual

Page 20

Advertising
background image

3-4

C

HAPTER

3: M

ANUAL

SETUP

The Spanning Tree Priority is the priority assigned to a bridge that is running the
Spanning Tree Protocol. It is used for prioritizing the bridges when Spanning Tree
is enabled.

To change the Spanning Tree Priority, use the command:

set bridge spanning_tree_priority <priority value>

Restricting LAN Access

Access to the bridging functions of the 3Com HomeConnect ADSL Modem
Ethernet can be restricted to certain MAC addresses by using the Access MAC
Address feature. When enabled, only packets sourced by or destined for
workstations with MAC addresses in the Access MAC Address Table will be
bridged.

To add a MAC address to the Access MAC Address Table, use the command:

add bridge access_mac_address <mac _addr>

Note: the mac address should be entered in the form: xx.xx.xx.xx.xx.xx

To delete a MAC address from the Access MAC Address Table, use the
command:

delete bridge access_mac_address <mac _addr>

To enable the use of the Access MAC Address feature, use the command:

enable bridge access_mac_addresses

To disable the use of the Access MAC Address feature, use the command:

disable bridge access_mac_addresses

Canned Filters

The 3Com HomeConnect ADSL Modem Ethernet provides sophisticated generic
filtering capabilities. Normally, filters must be created with a text editor, copied to
the unit, and applied to the appropriate interface or bridge port. This process is
described in the chapter on Filtering.

To simplify this process, several pre-programmed filters installed in the unit. These
“canned” filters allow or restrict certain common protocols from being
transported over a Bridge WAN port. The filters can be applied to a Bridge WAN
port with a single command.

The following canned filters are pre-programmed:

To apply a canned filter to a bridge port, use the command:

Table 3-1 Pre-Programmed Filters

Filter Name

Function

NO_IP

Do not allow IP packets

NO_IPX

Do not allow IPX packets

NO_IP_IPX

Do not allow IP or IPX packets

ONLY_IP

Only allow IP packets

ONLY_IPX

Only allow IPX packets

ONLY_IP_IPX

Only allow IP or IPX packets

ONLY_PPPOE

Only allow PPP-Over-Ethernet packets

Advertising