Brocade Communications Systems 53-1002163-02 specs

10 ACL configuration and management

106	Converged Enhanced Ethernet Administrator’s Guide
	53-1002163-02

Image 128

Brocade Communications Systems 53-1002163-02 manual ACL configuration and management

Contents

Converged Enhanced Ethernet Brocade Communications Systems, Incorporated Title Publication number Summary of changes Date Title Publication number Summary of changes Date Converged Enhanced Ethernet Administrator’s Guide Contents Chapter Using the CEE CLI This chapter Chapter Initial FCoE and CEE Configuration Chapter Configuring STP, RSTP, and Mstp Chapter Configuring Link Aggregation 101 107 131 123127 Appendix a WRR schedule two queues Strict priority and Weighted Round Robin schedulerStrict priority schedule two queues Page Tables Page Configuring VLANs, describes how to configure VLANs About This DocumentThis chapter How this document is organized Supported hardware and software What’s new in this document Text formatting Command syntax conventionsDocument conventions Corporation Referenced Trademarks and Products Additional informationKey terms Other industry resources Getting technical helpBrocade resources Document feedback FT00X0054E9 Introducing FCoE FCoE terminologyFCoE overview Term Description FCoE hardware Layer 2 Ethernet overview Layer 2 Ethernet overviewLayer 2 forwarding Vlan tagging Loop-free network environment Frame classification incoming Congestion control and queuing Converged Enhanced Ethernet Administrator’s Guide Access control Trunking FIP discovery FCoE Initialization ProtocolFlow Control FIP login FIP logout FCoE login LogincfgFCoE logout FCoE Initialization Protocol Registered State Change Notification Rscn Name serverFC zoning Upgrade and downgrade considerations for FCoE FCoE queuing Management Tools Using the CEE CLICEE Command Line Interface Saving your configuration changes Accessing the CEE CLI through the console or TelnetSaving configuration changes with the copy command Saving configuration changes with the write memory command To return to the Fabric OS CLI, enter the following command Accessing the CEE CLI from the Fabric OS shellCEE CLI command modes Interface port-channel CEE Command Line Interface CEE CLI command modes CEE CLI keyboard shortcutsLists CEE CLI keyboard shortcuts Keystroke Description Using the do command as a shortcut Displaying CEE CLI commands and command syntax CEE CLI command completion CEE CLI command output modifiers CEE Command Line Interface CEE CLI command output modifiers Tee CEE configuration guidelines and restrictions Configuration managementConfiguration management tasks Display the running configuration file Saving the running configuration fileLoading the startup configuration file Erasing the startup configuration file Flash file management commands Debugging and logging commandsArchiving the startup configuration file Restore an archived startup configuration file Switch#show debug FCoE Configuration Management Managing the FCoE configurationFCoE configuration guidelines and restrictions This chapter Configuring the FCoE login information Clearing loginsDisplaying FCoE configuration-related information Enabling or disabling login configuration management Displaying the FCoE login configuration Managing the current configuration transactionCleaning up login groups and VNport mappings Creating an FCoE login group Creating an FCoE login groupSaving the current FCoE configuration Modifying the FCoE login group device list Deleting an FCoE login groupRenaming an FCoE login group Perform the following task to delete an FCoE login group Creating an FCoE login group Overview Initial FCoE and CEE ConfigurationEnd to End FCoE using FC ISLs FCoE Logical Port Numbering FCoE port-to-front end TenGigabit port mapping High availability Hot plugControl Processor failover Protocol type Time interval High availability reference Operation, data, or state Expected behavior Configuring the FCoE interfaces Configuring the FCoE Vlan Assigning an FCoE map onto an interface Show vlan fcoe Configuring Dcbx Return to the privileged Exec mode using the end commandRepeat this procedure for any additional interfaces Activate the protocol Configuring Spanning Tree Protocol Configuring Spanning Tree ProtocolConfiguring Vlan membership CEE map configuration Bandwidth% Activate the CEE map mode Defining a Priority Group Table mapDefine the CEE map for Pgid CoSPGID Verifying the CEE maps Defining a Priority-Table mapApplying a CEE provisioning map to an interface Name Example Description Activate privileged Exec modeCEE audit logs Page CEE audit logs Ingress Vlan filtering Configuring VLANsVlan overview Displays the frame processing logic for an incoming frame Parameter Default setting Vlan configuration guidelines and restrictionsDefault Vlan configuration Vlan configuration and management Configuring the MTU on an interface portEnabling and disabling an interface port Creating a Vlan interface Disabling STP on a Vlan Configuring a Vlan interface to forward FCoE trafficEnabling STP on a Vlan Configuring an interface port as a trunk interface Configuring an interface port as a Layer 2 switch portConfiguring an interface port as an access interface Configuring an interface port as a converged interface Disabling a Vlan on a trunk interface Disabling a Vlan on a converged interface Configuring protocol-based Vlan classifier rulesConfiguring protocol-based Vlan classifier rules Configuring a Vlan classifier rule Configuring MAC address-based Vlan classifier rulesDeleting a Vlan classifier rule Creating a Vlan classifier group and adding rules Configuring the MAC address table Activating a Vlan classifier group with an interface portClearing Vlan counter statistics Displaying Vlan information Specifying or disabling the aging time for MAC addresses Adding static addresses to the MAC address table Configuring the MAC address table Configuring STP, RSTP, and Mstp STP overview Configuring STP Rstp overview STP interface state Rstp interface stateActive topology? Is the interface learning MAC addresses? Configuring Rstp Mstp overview Mstp overview Configuring Mstp Default STP, RSTP, and Mstp configuration STP, RSTP, and Mstp configuration and management Enabling STP, RSTP, or Mstp STP, RSTP, and Mstp configuration and management Disabling STP, RSTP, or MstpShutting down STP, RSTP, or Mstp globally Specifying the bridge priority Specifying the bridge maximum aging time Specifying the bridge forward delaySpecify the bridge forward delay Enabling the error disable timeout timer Specifying the error disable timeout intervalEnable the error disable timeout timer Specifying the port-channel path cost Specify the port-channel path cost Specifying the bridge hello time STP and RstpSpecifying the transmit hold count Rstp and Mstp Mapping a Vlan to an Mstp instance Enabling Cisco interoperability MstpDisabling Cisco interoperability Mstp Specifying a revision number for an Mstp configuration Enter the region command to assign a name to an Mstp regionSpecifying the maximum number of hops for a Bpdu Mstp Specifying a name for an Mstp region Clearing spanning tree-detected protocols Flushing MAC addresses Rstp and MstpClearing spanning tree counters Configuring STP, RSTP, or Mstp on CEE interface ports Configuring the path costDisplaying STP, RSTP, and MSTP-related information Enabling automatic edge detection Enabling a port interface as an edge port Enabling the guard root Specifying restrictions for an Mstp instance Enter the no shutdown command to enable the CEE interfaceSpecifying the Mstp hello time Specifying the port priority Specifying a link typeEnabling port fast STP Enabling spanning tree Restricting the port from becoming a root portRestricting the topology change notification Disabling spanning tree Configuring STP, RSTP, or Mstp on CEE interface ports Link aggregation overview Configuring Link AggregationLink Aggregation Group configuration Converged Enhanced Ethernet Administrator’s Guide Data Center Core Link Aggregation Control Protocol Dynamic link aggregationStatic link aggregation Brocade-proprietary aggregation Lacp configuration guidelines and restrictions Default Lacp configurationLacp configuration and management LAG distribution process Enabling Lacp on an interface in Layer 2 mode Configuring the Lacp system priorityConfiguring the Lacp timeout period on a CEE interface Enter the switchport mode command to set the mode Lacp troubleshooting tips Clearing Lacp counter statistics on a LAGClearing Lacp counter statistics on all LAG groups Displaying Lacp information Deskew calculation failed for link link-name Configuring Lldp Lldp overview Layer 2 topology mapping Layer 2 topology mapping Dcbx overview Priority Priority group Bandwidth check Enhanced Transmission Selection ETSPriority Flow Control PFC Dcbx interaction with other vendor devices Lldp configuration guidelines and restrictionsDefault Lldp configuration Lldp configuration and management Disabling and resetting Lldp globallyConfiguring Lldp global command options Enabling Lldp globally Specifying a system name for the Brocade FCoE hardware Specifying a user description for Lldp Advertising the optional Lldp TLVs Configuring the transmit frequency of Lldp framesConfiguring the hold time for receiving devices Configuring the advertisement of Lldp DCBX-related TLVs Configuring FCoE priority bitsAdvertise the Lldp DCBX-related TLVs using these commands Configure the FCoE priority bits Configuring iSCSI priority bits Configuring Lldp profiles Configuring the iSCSI profile Displaying LLDP-related information Configuring Lldp interface-level command optionsClearing LLDP-related information Display all Lldp statistics Display Lldp neighbor-related detail informationDisplay Lldp interface-related information Lldp configuration and management Configuring ACLs ACL overview Default ACL configuration ACL configuration guidelines and restrictionsACL configuration and management Creating a standard MAC ACL and adding rules Creating an extended MAC ACL and adding rules Modifying MAC ACL rules Reordering the sequence numbers in a MAC ACL Enter the no seq command to delete the existing ruleRemoving a MAC ACL Applying a MAC ACL to a Vlan interface ACL configuration and managementApplying a MAC ACL to a CEE interface ACL configuration and management Configuring QoS QoS overview Default user-priority mappings for untrusted interfaces RewritingQueueing User-priority mapping Configuring the QoS trust mode Incoming CoS User Priority Applying a CoS-to-CoS mutation QoS map Configuring user-priority mappingsCreating a CoS-to-CoS mutation QoS map User priority Traffic class Traffic class mappingUnicast traffic Multicast traffic Mapping CoS-to-Traffic-ClassActivating a mapping CoS-to-Traffic-Class Queueing Verifying a mapping CoS-to-Traffic-Class Congestion controlTail drop Ethernet pause Changing the Tail Drop threshold Ethernet Priority Flow Control Enabling Ethernet Pause Enable trust mode on the interface Enable an Ethernet PFC on the interfaceMulticast rate limiting Enabling an Ethernet PFC Strict priority scheduling Deficit weighted round robin schedulingScheduling Traffic class scheduling policy Scheduling the QoS queue Multicast traffic class Equivalent unicast traffic class Multicast queue schedulingScheduling the QoS multicast queue Pgid Specify the name of the CEE map to define Defining a priority group tableDefining a priority-table map Applying a CEE provisioning map to an interface Verifying the CEE maps 802.1x protocol overview Configuring 802.1x Port Authentication802.1x configuration guidelines and restrictions 802.1x authentication configuration tasks Interface-specific administrative tasks forConfigure authentication Between the switch and CNA or NIC Configuring 802.1x on specific interface ports Configuring 802.1x timeouts on specific interface ports Configure the timeout intervalEnable 802.1x authentication for the interface port Configure reauthentication for the interface port Interface-specific administrative tasks for Active Igmp snooping Configuring IgmpAbout Igmp Configuring Igmp Multicast routing Configuring Igmp snooping querier Configuring Igmp snooping mrouter Configure the mrouter timeout value Monitoring Igmp Configuring Rmon Rmon configuration and managementDefault Rmon configuration Configuring Rmon group statistics collection Configuring Rmon settings Configuring Rmon eventsEnable the CEE interface Configure Rmon group statistics on the interface Configuring Rmon history collection Rmon configuration and management Configure the Rmon eventActivate Rmon history collection for the interface Display the Rmon history Rmon configuration and management Brocade 8000 Replacement Switch Brocade 8000 Replacement Enhanced Group Management license Originalswitchadmin cfgactvshow Upload the running-configfile to the new switch Bring the new switch back onlineUpload the startup-configfile to the new switch Originalswitchadmin switchname originalswitch Brocade 8000 Replacement Index 802.1x QoS, 113 queuing FIP Layer Lldp Radius Vlan