Dell 53-1002116-01

92 Dell Converged Enhanced Ethernet Administrator’s Guide

53-1002116-01

ACL configuration and management

Contents

Main Page Contents About This Document Chapter 1 Introducing FCoE Chapter 2 Using the CEE CLI Chapter 3 Initial FCoE and CEE Configuration Chapter 4 Configuring IP static routes Chapter 5 Configuring VLANs Using the CEE CLI Chapter 6 Configuring STP, RSTP, and MSTP using the CEE CLI Chapter 7 Configuring Link Aggregation using the CEE CLI Chapter 8 Configuring LLDP using the CEE CLI Chapter 9 Configuring ACLs using the CEE CLI Chapter 10 Configuring QoS using the CEE CLI Chapter 11 Configuring 802.1x Port Authentication Chapter 12 Configuring sFlow using the CEE CLI Chapter 13 Configuring Port Mirroring using the CEE CLI Chapter 14 Configuring RMON using the CEE CLI Chapter 15 Configuring IGMP Chapter 16 FCoE configuration using the Fabric OS CLI Chapter 17 CEE configuration management Index Figures Page Tables Page About This Document How this document is organized Supported hardware and software Document conventions Text formatting Command syntax conventions Notes, cautions, and warnings ATTENTION Notice to the reader Getting technical help Contacting Dell Introducing FCoE FCoE terminology FCoE overview TABLE 1 FCoE hardware Layer 2 Ethernet overview FIGURE 1 Layer 2 forwarding VLAN tagging Loop-free network environment Frame classification (incoming) Congestion control and queuing - - - - Access control Access Gateway Trunking Flow Control FCoE Initialization Protocol FIP discovery FIP login FIP logout FCoE login FCoE logout Logincfg Name server FC zoning Registered State Change Notification (RSCN) FCoE queuing Using the CEE CLI Management Tools CEE Command Line Interface Saving your configuration changes Saving configuration changes with the copy command Saving configuration changes with the write command CEE CLI RBAC permissions Accessing the CEE CLI through the console or Telnet Accessing the CEE CLI from the Fabric OS shell CEE CLI command modes FIGURE 2 CEE Command Line Interface CEE Command Line Interface 2 CEE CLI keyboard shortcuts Table 4 lists CEE CLI keyboard shortcuts. TABLE 4 Keystroke Description Using the do command as a shortcut Displaying CEE CLI commands and command syntax CEE CLI command completion CEE CLI command output modifiers TABLE 5 Internal and external 10 Gbps Ethernet interfaces syntax Initial FCoE and CEE Configuration Overview Configuring the FCoE interfaces Configuring FCoE VLAN Assigning FCoE map on to an interface Configuring the CEE interfaces Configuring DCBX Configuring Spanning Tree Protocol Configuring VLAN membership Configuring protect mode Configuring IP static routes IP static routes overview TABLE 6 Configuring IP static routes TABLE 6 Recursive IP static routes Floating IP static routes Displaying and clearing IP static routes Page Configuring VLANs Using the CEE CLI VLAN overview Ingress VLAN filtering - - - - VLAN configuration guidelines and restrictions Default VLAN configuration VLAN configuration and management Enabling and disabling an interface port Configuring the MTU on an interface port Creating a VLAN interface Enabling STP on a VLAN Disabling STP on a VLAN Configuring a VLAN interface to forward FCoE traffic Configuring an interface port as a Layer 2 switch port Configuring an interface port as an access interface Configuring an interface port as a trunk interface Disabling a VLAN on a trunk interface Configuring an interface port as a converged interface Disabling a VLAN on a converged interface Configuring protocol-based VLAN classifier rules Configuring a VLAN classifier rule Configuring MAC address-based VLAN classifier rules Deleting a VLAN classifier rule Creating a VLAN classifier group and adding rules Activating a VLAN classifier group with an interface port Configuring the MAC address table Specifying or disabling the aging time for MAC addresses Adding static addresses to the MAC address table Page Configuring STP, RSTP, and MSTP using the CEE CLI STP overview Configuring STP on Dell FCoE hardware RSTP overview TABLE 8 Configuring RSTP on Dell FCoE hardware MSTP overview Configuring MSTP on Dell FCoE hardware STP, RSTP, and MSTP configuration guidelines and restrictions Default STP, RSTP, and MSTP configuration Default STP, RSTP, and MSTP configuration Table 9 lists the default STP, RSTP, and MSTP configuration. Table 10 lists the switch defaults that apply only to MSTP configurations. TABLE 9 TABLE 10 STP, RSTP, and MSTP configuration and management Enabling STP, RSTP, or MSTP Disabling STP, RSTP, or MSTP Shutting down STP, RSTP, or MSTP globally Specifying the bridge priority Specifying the bridge forward delay Specifying the bridge maximum aging time Enabling the error disable timeout timer Specifying the error disable timeout interval Specifying the port-channel path cost Specifying the bridge hello time (STP and RSTP) Specifying the transmit hold count (RSTP and MSTP) Enabling Cisco interoperability (MSTP) Disabling Cisco interoperability (MSTP) Mapping a VLAN to an MSTP instance Specifying the maximum number of hops for a BPDU (MSTP) Specifying a name for an MSTP region Specifying a revision number for an MSTP configuration Flushing MAC addresses (RSTP and MSTP) Clearing spanning tree counters Clearing spanning tree-detected protocols Displaying STP, RSTP, and MSTP-related information Configuring STP, RSTP, or MSTP on CEE interface ports Enabling automatic edge detection Configuring the path cost Enabling a port (interface) as an edge port Enabling the guard root Specifying the MSTP hello time Specifying restrictions for an MSTP instance Specifying a link type Enabling port fast (STP) Specifying the port priority Restricting the port from becoming a root port Restricting the topology change notification Enabling spanning tree Disabling spanning tree Page Configuring Link Aggregation using the CEE CLI Link aggregation overview Link Aggregation Group configuration Page Dell Converged Enhanced Ethernet Administrators Guide 67 53-1002116-01 FIGURE 4 FIGURE 5 Link Aggregation Control Protocol Dynamic link aggregation Static link aggregation Dell-proprietary aggregation LAG distribution process LACP configuration guidelines and restrictions Default LACP configuration LACP configuration and management Enabling LACP on a CEE interface Configuring the LACP system priority Configuring the LACP timeout period on a CEE interface Configuring minimum links feature Configuring interface tracking Clearing LACP counter statistics on a LAG Clearing LACP counter statistics on all LAG groups LACP troubleshooting tips Page Page Configuring LLDP using the CEE CLI LLDP overview Layer 2 topology mapping - Page DCBX overview Enhanced Transmission Selection (ETS) TABLE 13 Priority Flow Control (PFC) DCBX interaction with other vendor devices LLDP configuration guidelines and restrictions Default LLDP configuration LLDP configuration and management Enabling LLDP globally Disabling and resetting LLDP globally TABLE 14 Configuring LLDP global command options Specifying a system name for the Dell FCoE hardware Specifying an LLDP system description for the Dell FCoE hardware Specifying a user description for LLDP Enabling and disabling the receiving and transmitting of LLDP frames Configuring the transmit frequency of LLDP frames Configuring the hold time for receiving devices Advertising the optional LLDP TLVs Configuring the advertisement of LLDP DCBX -related TLVs Configuring FCoE priority bits Configuring LLDP profiles Configuring LLDP interface-level command options Clearing LLDP-related information Displaying LLDP-related information Page Configuring ACLs using the CEE CLI ACL overview Default ACL configuration ACL configuration guidelines and restrictions ACL configuration and management Creating a standard MAC ACL and adding rules TABLE 15 Creating an extended MAC ACL and adding rules Modifying MAC ACL rules Removing a MAC ACL Reordering the sequence numbers in a MAC ACL Applying a MAC ACL to a CEE interface Applying a MAC ACL to a VLAN interface Page Configuring QoS using the CEE CLI QoS overview Rewriting Queueing User-priority mapping Default user-priority mappings for untrusted interfaces Configuring the QoS trust mode TABLE 16 TABLE 17 Configuring user-priority mappings Creating a CoS-to-CoS mutation QoS map Applying a CoS-to-CoS mutation QoS map Traffic class mapping Unicast traffic TABLE 18 Multicast traffic Mapping CoS-to-Traffic-Class TABLE 19 TABLE 18 Activating a mapping CoS-to-Traffic-Class Verifying a mapping CoS-to-Traffic-Class Congestion control Tail drop FIGURE 6 Changing the Tail Drop threshold Ethernet pause Enabling Ethernet Pause Ethernet Priority Flow Control Enabling an Ethernet PFC Multicast rate limiting Creating a receive queue multicast rate-limit Scheduling Strict priority scheduling FIGURE 7 Deficit weighted round robin scheduling FIGURE 8 Traffic class scheduling policy TABLE 20 FIGURE 9 Scheduling the QoS queue Multicast queue scheduling TABLE 21 Scheduling the QoS multicast queue Converged Enhanced Ethernet map configuration TABLE 21 TABLE 22 TABLE 23 Creating a CEE map Defining a priority group table TABLE 23 Defining a priority-table map Applying a CEE provisioning map to an interface Verifying the CEE maps Configuring 802.1x Port Authentication 802.1x protocol overview 802.1x configuration guidelines and restrictions 802.1x authentication configuration tasks Configure authentication between the switch and CNA or NIC Interface-specific administrative tasks for 802.1x Configuring 802.1x on specific interface ports Configuring 802.1x timeouts on specific interface ports Configuring 802.1x re-authentication on specific interface ports Disabling 802.1x on specific interface ports Configuring sFlow using the CEE CLI sFlow protocol overview Interface flow samples Configuring the sFlow protocol globally Interface-specific administrative tasks for sFlow Disabling sFlow on specific interfaces Configuring sFlow on specific interfaces Page Configuring Port Mirroring using the CEE CLI Port Mirroring protocol overview Port Mirroring limitations Configuring ingress Port Mirroring Configuring egress Port Mirroring Configuring bidirectional Port Mirroring Deleting a Port Mirroring connection from a session Deleting a Port Mirroring session Page Configuring RMON using the CEE CLI RMON overview RMON configuration and management Default RMON configuration Configuring RMON events Configuring RMON group statistics collection Configuring RMON history collection Page Configuring IGMP About IGMP Active IGMP snooping Multicast routing Configuring IGMP Configuring IGMP snooping querier Monitoring IGMP Page FCoE configuration using the Fabric OS CLI FCoE configuration guidelines and restrictions Managing and displaying the FCoE configuration Enabling or disabling an FCoE port Configuring FCMAP values for a VLAN Configuring FIP multicast advertisement intervals Clearing logins Managing and displaying the FCoE login configuration Another important task in administrating FCoE is configuring the FCoE login information. Enabling or disabling FCoE login configuration management Displaying or aborting the current configuration transaction Cleaning up login groups and VN_port mappings Creating and managing the FCoE login group configuration 16 Displaying the FCoE login configuration The FCoE login group enables you to configure login policies. Creating and managing the FCoE login group configuration Another important task in administrating FCoE is configuring the FCoE login information. Creating an FCoE login group Creating and managing the FCoE login group configuration To create an FCoE login group, perform the following task. Modifying the FCoE login group device list To add or remove VN_port devices from the FCoE login group, perform the following tasks. Deleting an FCoE login group Renaming an FCoE login group To rename an FCoE login group, perform the following task. Page CEE configuration management CEE configuration management guidelines and restrictions CEE configuration management tasks Display the running configuration file Saving the running configuration file Loading the startup configuration file Erasing the startup configuration file. Archiving the running configuration file Restore an archived running configuration file Archiving the startup configuration file Restore an archived startup configuration file Archive a startup configuration from Flash Flash file management commands TABLE 24 Debugging and logging commands TABLE 25 TABLE 26 Page Index Symbols Numerics A B C D E F G H I K L M N O P Q R S T U V Z