Applying a MAC ACL to a CEE interface | Dell 53-1002116-01 guide

ACL configuration and management

9

To reorder the rules in a MAC ACL, perform the following task from Privileged EXEC mode.

1.Enter the resequence command to assign sequence numbers to the rules contained in the

MAC ACL.

switch#resequence access-list mac test_02 50 5

Applying a MAC ACL to a CEE interface

Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner that you need for this CEE interface. An ACL does not take effect until it is expressly applied to an interface using the access-groupcommand. Frames can be filtered as they enter an interface (ingress direction).

To apply a MAC ACL to a CEE interface, perform the following steps from Privileged EXEC mode.

1.Enter the configure terminal command to access global configuration mode.

2.Enter the interface command to specify the CEE interface type and slot/port number.

switch(config)#interface intengigabitethernet 0/1

3.Enter the switchport command to configure the interface as a Layer 2 switch port.

4.Enter the mac-access-groupcommand to specify the MAC ACL that is to be applied to the Layer 2 CEE interface in the ingress direction.

switch(conf-if-te-0/1)#mac access-group test_02 in

Applying a MAC ACL to a VLAN interface

Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner that you need for this VLAN interface. An ACL does not take effect until it is expressly applied to an interface using the access-groupcommand. Frames can be filtered as they enter an interface (ingress direction).

To apply a MAC ACL to a VLAN interface, perform the following steps from Privileged EXEC mode.

1.Enter the configure terminal command to access global configuration mode.

2.Enter the interface command to apply the VLAN interface to the MAC ACL.

switch(config)#interface vlan 50

3.Enter the mac-access-groupcommand to specify the MAC ACL that is to be applied to the VLAN interface in the ingress direction.

switch(conf-if-vl-82)# mac access-group test_02 in

Dell Converged Enhanced Ethernet Administrator’s Guide	91
53-1002116-01

Image 109

Dell 53-1002116-01 manual Applying a MAC ACL to a CEE interface, Applying a MAC ACL to a Vlan interface

Contents

Dell Converged Enhanced Ethernet Page Contents This chapter IP static routes overview Chapter Using the CEE CLI Chapter Configuring STP, RSTP, and Mstp using the CEE CLI Chapter Configuring Link Aggregation using the CEE CLI Chapter Configuring Lldp using the CEE CLI This chapter Chapter Configuring QoS using the CEE CLI Chapter Configuring Port Mirroring using the CEE CLI Chapter CEE configuration management Figures Page Tables Page This chapter About This DocumentHow this document is organized Document conventions Supported hardware and softwareText formatting Command syntax conventions Contacting Dell Getting technical help FCoE terminology Introducing FCoEFCoE overview FCoE hardware Layer 2 forwarding Layer 2 Ethernet overviewLayer 2 Ethernet overview Vlan tagging Frame classification incoming Loop-free network environment Congestion control and queuing Access Gateway Access control Trunking FCoE Initialization ProtocolFlow Control FIP discovery FIP login FIP logout FCoE loginFCoE logout Name server LogincfgFC zoning FCoE queuing CEE Command Line Interface Using the CEE CLIManagement Tools Saving configuration changes with the copy command Saving your configuration changesSaving configuration changes with the write command CEE CLI Rbac permissions Accessing the CEE CLI from the Fabric OS shell Accessing the CEE CLI through the console or TelnetCEE CLI command modes CEE Command Line Interface Interface port-channel CEE CLI keyboard shortcuts CEE Command Line Interface CEE CLI command modesLists CEE CLI keyboard shortcuts Displaying CEE CLI commands and command syntax Using the do command as a shortcut CEE CLI command output modifiers CEE CLI command completion Internal and external 10 Gbps Ethernet interfaces syntax Configuring the FCoE interfaces Initial FCoE and CEE ConfigurationOverview Configuring FCoE Vlan Configuring the CEE interfaces Configuring the CEE interfacesTo disable the interface Repeat this procedure for any additional interfaces Configuring Dcbx Configuring Vlan membership Configuring Spanning Tree ProtocolConfiguring Spanning Tree Protocol Activate the protocol Configure the interface as an IP interface Configuring protect modeReturn to Privileged Exec mode Enable protect mode IP static routes overview Configuring IP static routes Configuring IP static routes Recursive IP static routes Configuring IP static routesFloating IP static routes Displaying and clearing IP static routes Ip route All Use the clear ip route command to remove a static ip route Vlan overview Configuring VLANs Using the CEE CLIIngress Vlan filtering Displays the frame processing logic for an incoming frame Default Vlan configuration Vlan configuration guidelines and restrictions Configuring the MTU on an interface port Vlan configuration and managementVlan configuration and management To disable the CEE interface Enabling STP on a Vlan Creating a Vlan interfaceDisabling STP on a Vlan Configuring an interface port as a Layer 2 switch port Configuring a Vlan interface to forward FCoE trafficConfiguring an interface port as an access interface Configuring an interface port as a converged interface Configuring an interface port as a trunk interfaceDisabling a Vlan on a trunk interface Disabling a Vlan on a converged interface Configuring protocol-based Vlan classifier rules Configuring MAC address-based Vlan classifier rules Configuring a Vlan classifier ruleDeleting a Vlan classifier rule Creating a Vlan classifier group and adding rules Activating a Vlan classifier group with an interface port Configuring the MAC address tableClearing Vlan counter statistics Displaying Vlan information Adding static addresses to the MAC address table Specifying or disabling the aging time for MAC addresses Configuring the MAC address table STP overview Configuring STP, RSTP, and Mstp using the CEE CLI Configuring STP on Dell FCoE hardware Is the interface learning MAC addresses? Rstp overview Configuring Rstp on Dell FCoE hardware For details, see Specifying the port priority on Mstp overview Configuring Mstp on Dell FCoE hardware Switchconf-mstp#max-hops Default STP, RSTP, and Mstp configuration Default STP, RSTP, and Mstp configuration STP, RSTP, and Mstp configuration and management STP, RSTP, and Mstp configuration and managementEnabling STP, RSTP, or Mstp Disabling STP, RSTP, or Mstp Specify the bridge forward delay Specifying the bridge forward delaySpecifying the bridge priority Specifying the error disable timeout interval Enabling the error disable timeout timerEnable the error disable timeout timer Specifying the bridge maximum aging time Specifying the bridge hello time STP and Rstp Specifying the port-channel path costSpecifying the transmit hold count Rstp and Mstp Specify the port-channel path cost Disabling Cisco interoperability Mstp Enabling Cisco interoperability MstpMapping a Vlan to an Mstp instance Map a Vlan to an Mstp instance Enter the region command to assign a name to an Mstp region Specifying a revision number for an Mstp configurationSpecifying the maximum number of hops for a Bpdu Mstp Specifying a name for an Mstp region Clearing spanning tree counters Flushing MAC addresses Rstp and MstpClearing spanning tree-detected protocols Configuring the path cost Configuring STP, RSTP, or Mstp on CEE interface portsDisplaying STP, RSTP, and MSTP-related information Enabling automatic edge detection Enabling the guard root Enabling a port interface as an edge port Specifying the Mstp hello time Enter the no shutdown command to enable the CEE interfaceSpecifying restrictions for an Mstp instance Enabling port fast STP Specifying a link typeSpecifying the port priority Restricting the topology change notification Restricting the port from becoming a root portEnabling spanning tree Disabling spanning tree Configuring STP, RSTP, or Mstp on CEE interface ports Link Aggregation Group configuration Configuring Link Aggregation using the CEE CLILink aggregation overview Dell Converged Enhanced Ethernet Administrator’s Guide Configuring LAGs for a top-of-the-rack CEE switch-Example Dynamic link aggregation Link Aggregation Control ProtocolStatic link aggregation Dell-proprietary aggregation Default Lacp configuration Lacp configuration guidelines and restrictionsLacp configuration and management Lacp configuration guidelines and restrictions Configuring the Lacp timeout period on a CEE interface Configuring the Lacp system priorityConfiguring minimum links feature Configure the minimum links Configuring interface trackingEnable tracking Clearing Lacp counter statistics on a LAG Clearing Lacp counter statistics on all LAG groups Lacp troubleshooting tipsDisplaying Lacp information Deskew calculation failed for link link-name Lacp troubleshooting tips Lldp overview Configuring Lldp using the CEE CLI Layer 2 topology mapping Layer 2 topology mappingPage Enhanced Transmission Selection ETS Dcbx overviewDcbx overview Dcbx interaction with other vendor devices Lldp configuration guidelines and restrictionsPriority Flow Control PFC Dcbx interaction with other vendor devices Lldp configuration and management Default Lldp configurationDisabling and resetting Lldp globally Default Lldp configuration Specifying a system name for the Dell FCoE hardware Configuring Lldp global command optionsSpecifying a user description for Lldp Configuring the hold time for receiving devices Configuring the transmit frequency of Lldp framesAdvertising the optional Lldp TLVs Configuring FCoE priority bits Configuring the advertisement of Lldp Dcbx -related TLVsConfiguring Lldp profiles Advertise the Lldp DCBX-related TLVs using these commands Enable the transmitting and receiving of Lldp frames Configuring Lldp interface-level command optionsConfigure the transmission frequency of Lldp updates Specify a description for the profile Displaying LLDP-related information Clearing LLDP-related information Lldp configuration and management ACL overview Configuring ACLs using the CEE CLI ACL configuration guidelines and restrictions Default ACL configurationACL configuration and management Creating a standard MAC ACL and adding rules Modifying MAC ACL rules Creating an extended MAC ACL and adding rules Removing a MAC ACL Enter the no seq command to delete the existing ruleReordering the sequence numbers in a MAC ACL Applying a MAC ACL to a Vlan interface Applying a MAC ACL to a CEE interface ACL configuration and management QoS overview Configuring QoS using the CEE CLI Rewriting Default user-priority mappings for untrusted interfacesQueueing User-priority mapping Incoming CoS User Priority Configuring the QoS trust mode Creating a CoS-to-CoS mutation QoS map Configuring user-priority mappings Applying a CoS-to-CoS mutation QoS map Traffic class mappingUnicast traffic Queueing Mapping CoS-to-Traffic-Class Multicast traffic Verifying a mapping CoS-to-Traffic-Class Activating a mapping CoS-to-Traffic-ClassActivate the CoS-to-Traffic-Class mapping by name Tail drop Congestion controlCongestion control Changing the Tail Drop threshold Ethernet pause Enabling Ethernet Pause Ethernet Priority Flow ControlEnabling an Ethernet PFC Multicast rate limiting Enable an Ethernet PFC on the interfaceCreating a receive queue multicast rate-limit Scheduling Deficit weighted round robin schedulingStrict priority scheduling Scheduling SP0 SP1 SP2 SP3 SP4 SP5 SP6 SP8 Traffic class scheduling policy Scheduling the QoS queue Multicast queue scheduling Scheduling the QoS multicast queue Converged Enhanced Ethernet map configuration Pgid Defining a priority group table Creating a CEE mapCreate a CEE map Define the CEE map for Pgid Applying a CEE provisioning map to an interface Defining a priority-table mapVerifying the CEE maps 802.1x configuration guidelines and restrictions Configuring 802.1x Port Authentication802.1x protocol overview Interface-specific administrative tasks for 802.1x authentication configuration tasksConfigure authentication Between the switch and CNA or NIC 11 802.1x authentication configuration tasks Configuring 802.1x timeouts on specific interface ports Configuring 802.1x on specific interface ports Disabling 802.1x on specific interface ports SFlow protocol overview Configuring sFlow using the CEE CLIInterface flow samples Packet counter samples Interface-specific administrative tasks for sFlow Configuring the sFlow protocol globallyDisabling sFlow on specific interfaces Disable sFlow on the interface Configuring sFlow on specific interfacesEnable sFlow for the interface Configure the sFlow polling interval Interface-specific administrative tasks for sFlow Port Mirroring protocol overview Configuring Port Mirroring using the CEE CLIPort Mirroring limitations Configuring egress Port Mirroring Configuring ingress Port MirroringConfiguring bidirectional Port Mirroring Configuring ingress Port Mirroring Deleting a Port Mirroring session Deleting a Port Mirroring connection from a sessionOpen an existing monitor session Use the no option to delete a particular port connection Deleting a Port Mirroring session Rmon configuration and management Configuring Rmon using the CEE CLIDefault Rmon configuration Configuring Rmon settings Configuring Rmon group statistics collection Configuring Rmon eventsConfigure the Rmon event Configuring Rmon history collection Rmon configuration and management About Igmp Configuring IgmpActive Igmp snooping Configuring Igmp snooping querier Configuring IgmpConfiguring Igmp Configure a Vlan port member to be a multi-router interface Monitoring Igmp Page FCoE configuration guidelines and restrictions FCoE configuration using the Fabric OS CLI Configuring Fcmap values for a Vlan Managing and displaying the FCoE configurationConfiguring FIP multicast advertisement intervals Managing and displaying the FCoE configuration Clearing logins Managing and displaying the FCoE login configurationDisplaying FCoE configuration-related information Enabling or disabling FCoE login configuration management Cleaning up login groups and VNport mappings Displaying or aborting the current configuration transaction Displaying the FCoE login configuration Creating and managing the FCoE login group configurationSaving the current FCoE configuration Creating an FCoE login group Deleting an FCoE login group Modifying the FCoE login group device listTo delete an FCoE login group, perform the following task To rename an FCoE login group, perform the following task Renaming an FCoE login group Creating and managing the FCoE login group configuration CEE configuration management guidelines and restrictions CEE configuration managementCEE configuration management tasks Saving the running configuration file Display the running configuration fileLoading the startup configuration file Erasing the startup configuration file Restore an archived running configuration file Archiving the running configuration fileArchiving the startup configuration file Restore an archived startup configuration file Restore a startup configuration file from Flash Flash file management commandsCEE configuration management commands Flash file management commands Switch#erase flash Debugging and logging commands Debugging and logging commands Index Symbols Numerics QoS, 100 queuing FIP PEAP, 27 Rstp Vlan