Layer 3 access control list policy

18

Configuring the ACL configuration type and operations

To configure the ACL configuration type and operation, complete the following steps.

1.Select the configuration type by choosing one of the following options:

Incremental — Deploys add and delete operations. During deployment, the Management application checks all ACLs to determine if the ACL name or number matches any ACL number already deployed on a switch.

If the ACL name or number matches, the following actions occur:

Add operation — The ACL on the switch is overwritten by the one in configuration during deployment.

Delete operation — Deletes the ACL from the switch during deployment.

No Action operation — Skips the ACL during deployment; however, if you save the deployment the ‘no action’ ACL remains part of the configuration and can be added or deleted at a later date.

If the ACL name or number does not match, the following actions occur:

Add operation — The ACL is appended on the switch.

No Action operation — Skips the ACL during deployment; however, if you save the deployment the ‘no action’ ACL remains part of the configuration and can be added or deleted at a later date.

Overwrite — Only deploys add operations. During deployment, the Management application clears all ACLs currently on the switch and then applies the new configuration.

2.(Ethernet routers only) To set the hit statistics duration, refer to “Configuring hit statistics” on page 597.

3.To deploy the configuration, click OK on the Device_Name - L3 ACL Configuration dialog box.

The Deploy to Products - L3 ACL dialog box displays. To deploy the configuration, refer to “Security configuration deployment” on page 629.

Configuring hit statistics

To configure hit statistics, complete the following steps.

1.Select an Ethernet router product and select Configure > Security > L3 ACL > Product. The Device_Name - L3 ACL Configuration dialog box displays.

2.Select a duration (1 second, 1 minute, 5 minutes, or Cumulative) from the Hit Stats Duration list.

3.Click Refresh to refresh the hit statistics.

The Refresh Time field displays the last time the Management application client successfully collected the hit statistics.

Brocade Network Advisor IP User Manual

597

53-1003056-01

 

Page 649
Image 649
Brocade Communications Systems IP250 Configuring the ACL configuration type and operations, Configuring hit statistics