ACL configuration and management | Dell 53-1002116-01 manual

9 ACL configuration and management

92	Dell Converged Enhanced Ethernet Administrator’s Guide
	53-1002116-01

Image 110

Dell 53-1002116-01 manual ACL configuration and management

Contents

Dell Converged Enhanced Ethernet Page Contents Chapter Using the CEE CLI This chapter IP static routes overview Chapter Configuring STP, RSTP, and Mstp using the CEE CLI Chapter Configuring Link Aggregation using the CEE CLI Chapter Configuring Lldp using the CEE CLI Chapter Configuring QoS using the CEE CLI This chapter Chapter Configuring Port Mirroring using the CEE CLI Chapter CEE configuration management Figures Page Tables Page How this document is organized About This DocumentThis chapter Text formatting Supported hardware and softwareDocument conventions Command syntax conventions Getting technical help Contacting Dell FCoE overview Introducing FCoEFCoE terminology FCoE hardware Layer 2 Ethernet overview Layer 2 Ethernet overviewLayer 2 forwarding Vlan tagging Loop-free network environment Frame classification incoming Congestion control and queuing Access control Access Gateway Flow Control FCoE Initialization ProtocolTrunking FIP discovery FIP login FCoE logout FCoE loginFIP logout FC zoning LogincfgName server FCoE queuing Management Tools Using the CEE CLICEE Command Line Interface Saving configuration changes with the write command Saving your configuration changesSaving configuration changes with the copy command CEE CLI Rbac permissions CEE CLI command modes Accessing the CEE CLI through the console or TelnetAccessing the CEE CLI from the Fabric OS shell CEE Command Line Interface Interface port-channel Lists CEE CLI keyboard shortcuts CEE Command Line Interface CEE CLI command modesCEE CLI keyboard shortcuts Using the do command as a shortcut Displaying CEE CLI commands and command syntax CEE CLI command completion CEE CLI command output modifiers Internal and external 10 Gbps Ethernet interfaces syntax Overview Initial FCoE and CEE ConfigurationConfiguring the FCoE interfaces Configuring FCoE Vlan To disable the interface Configuring the CEE interfacesConfiguring the CEE interfaces Repeat this procedure for any additional interfaces Configuring Dcbx Configuring Spanning Tree Protocol Activate the protocol Configuring Spanning Tree ProtocolConfiguring Vlan membership Return to Privileged Exec mode Configuring protect modeConfigure the interface as an IP interface Enable protect mode Configuring IP static routes IP static routes overview Configuring IP static routes Floating IP static routes Configuring IP static routesRecursive IP static routes Displaying and clearing IP static routes Use the clear ip route command to remove a static ip route Ip route All Ingress Vlan filtering Configuring VLANs Using the CEE CLIVlan overview Displays the frame processing logic for an incoming frame Vlan configuration guidelines and restrictions Default Vlan configuration Vlan configuration and management Vlan configuration and managementConfiguring the MTU on an interface port To disable the CEE interface Disabling STP on a Vlan Creating a Vlan interfaceEnabling STP on a Vlan Configuring an interface port as an access interface Configuring a Vlan interface to forward FCoE trafficConfiguring an interface port as a Layer 2 switch port Disabling a Vlan on a trunk interface Configuring an interface port as a trunk interfaceConfiguring an interface port as a converged interface Configuring protocol-based Vlan classifier rules Disabling a Vlan on a converged interface Deleting a Vlan classifier rule Configuring a Vlan classifier ruleConfiguring MAC address-based Vlan classifier rules Creating a Vlan classifier group and adding rules Clearing Vlan counter statistics Configuring the MAC address tableActivating a Vlan classifier group with an interface port Displaying Vlan information Specifying or disabling the aging time for MAC addresses Adding static addresses to the MAC address table Configuring the MAC address table Configuring STP, RSTP, and Mstp using the CEE CLI STP overview Configuring STP on Dell FCoE hardware Rstp overview Is the interface learning MAC addresses? Configuring Rstp on Dell FCoE hardware Mstp overview For details, see Specifying the port priority on Configuring Mstp on Dell FCoE hardware Switchconf-mstp#max-hops Default STP, RSTP, and Mstp configuration Default STP, RSTP, and Mstp configuration Enabling STP, RSTP, or Mstp STP, RSTP, and Mstp configuration and managementSTP, RSTP, and Mstp configuration and management Disabling STP, RSTP, or Mstp Specifying the bridge priority Specifying the bridge forward delaySpecify the bridge forward delay Enable the error disable timeout timer Enabling the error disable timeout timerSpecifying the error disable timeout interval Specifying the bridge maximum aging time Specifying the transmit hold count Rstp and Mstp Specifying the port-channel path costSpecifying the bridge hello time STP and Rstp Specify the port-channel path cost Mapping a Vlan to an Mstp instance Enabling Cisco interoperability MstpDisabling Cisco interoperability Mstp Map a Vlan to an Mstp instance Specifying the maximum number of hops for a Bpdu Mstp Specifying a revision number for an Mstp configurationEnter the region command to assign a name to an Mstp region Specifying a name for an Mstp region Clearing spanning tree-detected protocols Flushing MAC addresses Rstp and MstpClearing spanning tree counters Displaying STP, RSTP, and MSTP-related information Configuring STP, RSTP, or Mstp on CEE interface portsConfiguring the path cost Enabling automatic edge detection Enabling a port interface as an edge port Enabling the guard root Specifying restrictions for an Mstp instance Enter the no shutdown command to enable the CEE interfaceSpecifying the Mstp hello time Specifying the port priority Specifying a link typeEnabling port fast STP Enabling spanning tree Restricting the port from becoming a root portRestricting the topology change notification Disabling spanning tree Configuring STP, RSTP, or Mstp on CEE interface ports Link aggregation overview Configuring Link Aggregation using the CEE CLILink Aggregation Group configuration Dell Converged Enhanced Ethernet Administrator’s Guide Configuring LAGs for a top-of-the-rack CEE switch-Example Static link aggregation Link Aggregation Control ProtocolDynamic link aggregation Dell-proprietary aggregation Lacp configuration and management Lacp configuration guidelines and restrictionsDefault Lacp configuration Lacp configuration guidelines and restrictions Configuring minimum links feature Configuring the Lacp system priorityConfiguring the Lacp timeout period on a CEE interface Enable tracking Configuring interface trackingConfigure the minimum links Clearing Lacp counter statistics on a LAG Displaying Lacp information Lacp troubleshooting tipsClearing Lacp counter statistics on all LAG groups Deskew calculation failed for link link-name Lacp troubleshooting tips Configuring Lldp using the CEE CLI Lldp overview Layer 2 topology mapping Layer 2 topology mappingPage Dcbx overview Dcbx overviewEnhanced Transmission Selection ETS Priority Flow Control PFC Lldp configuration guidelines and restrictionsDcbx interaction with other vendor devices Dcbx interaction with other vendor devices Disabling and resetting Lldp globally Default Lldp configurationLldp configuration and management Default Lldp configuration Specifying a user description for Lldp Configuring Lldp global command optionsSpecifying a system name for the Dell FCoE hardware Advertising the optional Lldp TLVs Configuring the transmit frequency of Lldp framesConfiguring the hold time for receiving devices Configuring Lldp profiles Configuring the advertisement of Lldp Dcbx -related TLVsConfiguring FCoE priority bits Advertise the Lldp DCBX-related TLVs using these commands Configure the transmission frequency of Lldp updates Configuring Lldp interface-level command optionsEnable the transmitting and receiving of Lldp frames Specify a description for the profile Clearing LLDP-related information Displaying LLDP-related information Lldp configuration and management Configuring ACLs using the CEE CLI ACL overview ACL configuration and management Default ACL configurationACL configuration guidelines and restrictions Creating a standard MAC ACL and adding rules Creating an extended MAC ACL and adding rules Modifying MAC ACL rules Reordering the sequence numbers in a MAC ACL Enter the no seq command to delete the existing ruleRemoving a MAC ACL Applying a MAC ACL to a CEE interface Applying a MAC ACL to a Vlan interface ACL configuration and management Configuring QoS using the CEE CLI QoS overview Queueing Default user-priority mappings for untrusted interfacesRewriting User-priority mapping Configuring the QoS trust mode Incoming CoS User Priority Configuring user-priority mappings Creating a CoS-to-CoS mutation QoS map Unicast traffic Traffic class mappingApplying a CoS-to-CoS mutation QoS map Queueing Multicast traffic Mapping CoS-to-Traffic-Class Activate the CoS-to-Traffic-Class mapping by name Activating a mapping CoS-to-Traffic-ClassVerifying a mapping CoS-to-Traffic-Class Congestion control Congestion controlTail drop Ethernet pause Changing the Tail Drop threshold Enabling an Ethernet PFC Ethernet Priority Flow ControlEnabling Ethernet Pause Creating a receive queue multicast rate-limit Enable an Ethernet PFC on the interfaceMulticast rate limiting Strict priority scheduling Deficit weighted round robin schedulingScheduling Scheduling Traffic class scheduling policy SP0 SP1 SP2 SP3 SP4 SP5 SP6 SP8 Multicast queue scheduling Scheduling the QoS queue Converged Enhanced Ethernet map configuration Scheduling the QoS multicast queue Pgid Create a CEE map Creating a CEE mapDefining a priority group table Define the CEE map for Pgid Verifying the CEE maps Defining a priority-table mapApplying a CEE provisioning map to an interface 802.1x protocol overview Configuring 802.1x Port Authentication802.1x configuration guidelines and restrictions Configure authentication Between the switch and CNA or NIC 802.1x authentication configuration tasksInterface-specific administrative tasks for 11 802.1x authentication configuration tasks Configuring 802.1x on specific interface ports Configuring 802.1x timeouts on specific interface ports Disabling 802.1x on specific interface ports Interface flow samples Configuring sFlow using the CEE CLISFlow protocol overview Packet counter samples Disabling sFlow on specific interfaces Configuring the sFlow protocol globallyInterface-specific administrative tasks for sFlow Enable sFlow for the interface Configuring sFlow on specific interfacesDisable sFlow on the interface Configure the sFlow polling interval Interface-specific administrative tasks for sFlow Port Mirroring limitations Configuring Port Mirroring using the CEE CLIPort Mirroring protocol overview Configuring bidirectional Port Mirroring Configuring ingress Port MirroringConfiguring egress Port Mirroring Configuring ingress Port Mirroring Open an existing monitor session Deleting a Port Mirroring connection from a sessionDeleting a Port Mirroring session Use the no option to delete a particular port connection Deleting a Port Mirroring session Default Rmon configuration Configuring Rmon using the CEE CLIRmon configuration and management Configuring Rmon settings Configure the Rmon event Configuring Rmon eventsConfiguring Rmon group statistics collection Configuring Rmon history collection Rmon configuration and management Active Igmp snooping Configuring IgmpAbout Igmp Configuring Igmp Configuring IgmpConfiguring Igmp snooping querier Configure a Vlan port member to be a multi-router interface Monitoring Igmp Page FCoE configuration using the Fabric OS CLI FCoE configuration guidelines and restrictions Configuring FIP multicast advertisement intervals Managing and displaying the FCoE configurationConfiguring Fcmap values for a Vlan Managing and displaying the FCoE configuration Displaying FCoE configuration-related information Managing and displaying the FCoE login configurationClearing logins Enabling or disabling FCoE login configuration management Displaying or aborting the current configuration transaction Cleaning up login groups and VNport mappings Saving the current FCoE configuration Creating and managing the FCoE login group configurationDisplaying the FCoE login configuration Creating an FCoE login group To delete an FCoE login group, perform the following task Modifying the FCoE login group device listDeleting an FCoE login group Renaming an FCoE login group To rename an FCoE login group, perform the following task Creating and managing the FCoE login group configuration CEE configuration management tasks CEE configuration managementCEE configuration management guidelines and restrictions Loading the startup configuration file Display the running configuration fileSaving the running configuration file Erasing the startup configuration file Archiving the startup configuration file Archiving the running configuration fileRestore an archived running configuration file Restore an archived startup configuration file CEE configuration management commands Flash file management commandsRestore a startup configuration file from Flash Flash file management commands Debugging and logging commands Switch#erase flash Debugging and logging commands Symbols Numerics Index QoS, 100 queuing FIP PEAP, 27 Rstp Vlan