This section describes using Passport Device Manager to configure IP filtering supported on a Passport 1000 Series routing switch. These filters are used to manage traffic and, in some cases, to provide security. Each filter set includes match conditions (a list of filter records defining the match criteria) and actions (forward, drop, prioritize, mirror, elevate IEEE VLAN priority, or prevent incoming TCP connections) to be performed when a match condition is satisfied.

IP filters apply to all routed IP packets to be forwarded through the routing switch on specified ingress ports. The filters are applied to the switch ingress ports with a default action to forward or drop. All packets not matching any filter are forwarded or dropped, depending on the port's default action. In version A hardware, the port default action was to forward; in version B hardware, the port default action can be either forward or drop.

Two types of filters can be applied:

• Traffic filters (source and destination filters)
• Global filters

Filters are applied to a port using filter sets, and actions are assigned when applying a filter set to a port. The actions of individual filters can overwrite the default actions of the port.

<Italic>Networking Concepts for the Passport 1000 Series Routing Switch