topic RE: Ingress filter like on EOS also on EXOS? in ExtremeSwitching (EXOS/Switch Engine)

Ingress filter like on EOS also on EXOS?

jeronimo — Tue, 09 Aug 2016 21:55:00 GMT

Hi all,

Can an ingress filter be implemented on EXOS? In fact it is a basic security feature IMHO because creating tagged packets to trash a VLAN you usually don't have access to is not that hard...

To remind everyone: ingress filter on EOS = a packet ingressing the port with a certain tag will only be accepted if the VLAN from the tag is present in the port's egress VLAN list.

Thanks,
Marki

RE: Ingress filter like on EOS also on EXOS?

Erik_Auerswald — Tue, 09 Aug 2016 22:08:00 GMT

EXOS by default works as EOS does with activated ingress-filter.

RE: Ingress filter like on EOS also on EXOS?

BrandonC — Tue, 09 Aug 2016 22:12:00 GMT

Hi Jeronimo,

EXOS already does this by default.

Have you seen an issue where an EXOS switch is passing traffic that it should not based on the VLAN config on a port? If so, please open a case with GTAC.

-Brandon

RE: Ingress filter like on EOS also on EXOS?

jeronimo — Tue, 09 Aug 2016 22:12:00 GMT

Thanks, no I haven't seen anything. It's a pre-sales thing 😉