Ingress filter like on EOS also on EXOS?

[jeronimo]

Hi all,

Can an ingress filter be implemented on EXOS? In fact it is a basic security feature IMHO because creating tagged packets to trash a VLAN you usually don't have access to is not that hard...

To remind everyone: ingress filter on EOS = a packet ingressing the port with a certain tag will only be accepted if the VLAN from the tag is present in the port's egress VLAN list.

Thanks,
Marki

[BrandonC]

Hi Jeronimo,

EXOS already does this by default.

Have you seen an issue where an EXOS switch is passing traffic that it should not based on the VLAN config on a port? If so, please open a case with GTAC.

-Brandon

[jeronimo]

Thanks, no I haven't seen anything. It's a pre-sales thing 😉

[Erik_Auerswald]

EXOS by default works as EOS does with activated ingress-filter.