QoS, Access Control Lists, 137 | Intel IXM5414E specification

Click the Submit button to send the updated screen to the switch and have the changes take effect on the switch If you want the switch to retain the new values across a power cycle you must perform a save.

Click the Refresh button to display the current page with the latest settings and status.

QoS

This menu provides access to two Quality of Service (QoS) menus:

•Access Control Lists (ACLs)

•Bandwidth provisioning

Access Control Lists

An Access Control List (ACL) consists of a set of rules which are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit/Deny) is taken and the additional rules are not checked for a match. You can specify the interfaces to which an ACL applies using the Configuration screen. You specify the rules for the ACL using the ACL Rule Configuration screen. ACL menu options are:

•Configuration

•Summary

•Rule configuration

Configuration

Use this panel to create an ACL.

Intel® Blade Server Ethernet Switch Module IXM5414E

137

Image 147

Intel IXM5414E manual QoS, Access Control Lists, 137

Contents

C66107-004 Page Contents Page Safety To Disconnect To Connect Vii Statement Viii XxCAUTION Page Page Related publications Major components of the IXM5414E switch module Specifications and features Performance featuresPorts Garp Gmrp Gvrp Standards Management Intel Blade Server Ethernet Switch Module IXM5414E Network Cable Support Ethernet interface requirements Handling static-sensitive devices Installation guidelinesModule Bay Switch-module function System reliability considerations Installing the IXM5414E switch module Sbce Intel Blade Server Ethernet Switch Module IXM5414E Removing the IXM5414E switch module Intel Blade Server Ethernet Switch Module IXM5414E Intel Blade Server Ethernet Switch Module IXM5414E LEDs Information panel Intel Blade Server Ethernet Switch Module IXM5414E Chassis configuration and operation Intel Blade Server Ethernet Switch Module IXM5414E overview Switch module management and control IP addresses and Snmp community names Module bay number Default IP address Traps Topology change Spanning Tree Protocol STP Authentication failureManagement Information Bases MIB Port mirroring Packet forwarding Switching conceptsAuthentication Simple Network Management Protocol Snmp Spanning Tree Protocol STP Ieee 802.1Q VLANs Virtual Local Area Networks Vlan Forwarding rules between ports Ieee 802.1Q Vlan packet forwarding Ieee 802.1Q Tag Ieee 802.1Q Vlan tags Port Vlan ID Tagging and untaggingEgress rules Ieee 802.1Q Vlan configuration Static MAC filteringGeneric Attribute Registration Protocol Garp Group Membership Information Group Service Requirements InformationGarp Vlan Registration Protocol Gvrp Garp Multicast Registration Protocol Gmrp Internet Group Management Protocol Igmp snooping Distribution method Static LAGs Dynamic Host Configuration Protocol Dhcp Ieee AuthenticatorAuthentication server Security Radius authentication Local authenticationSecure Shell SSH Secure Socket Layer SSL SSL Feature Component Type Quality of Service QoS Bandwidth provisioningBandwidth Allocation Profile Access Control Lists ACL Intel Blade Server Ethernet Switch Module IXM5414E Introduction Remotely managing the switch module Getting started Intel Blade Server Ethernet Switch Module IXM5414E QOS System ARP cache Inventory informationMAC Address Machine Model Maintenance LevelSystem Description Machine Type Network Processing Device ConfigurationSystem description Operating System Network connectivity Default Gateway Network Configuration ProtocolBurned In MAC Address Maximum Number of Telnet Sessions Telnet Login Timeout minutesTelnet User accounts User PasswordConfirm Password Snmp v3 Access Mode Encryption Key Login configurationAuthentication Protocol Encryption Protocol Login session Login summary ID of this rowConnection From 802.1X Port Security Users User loginLogin Users Method List Authentication is complete Aging Interval secs ConfigurationForwarding database Search IfIndex FilterLearned MAC Address Search Other LogsMessage log Gmrp Learned Event log TimeDays, hours, minutes and seconds TaskID PortEntry Filename Probe Physical Mode Admin ModeFlow Control Mode Lacp Mode Summary STP Mode Port TypeForwarding State Link Trap Control ModeMirroring Link Status Port to be Mirrored Port Mirroring Mode Community configuration CommunityName Trap receiver configuration Client IP AddressClient IP Mask Trap receiver summary IP Address EnableDisable Supported Management Information Bases MIB Switch detailed StatisticsDescription RFC title or MIB description Multicast Packets Received Packets Received Without ErrorOctets Received Unicast Packets Received Multicast Packets Transmitted Packets Transmitted Without ErrorsOctets Transmitted Unicast Packets Transmitted Switch summary Total Packets Received Without ErrorsPackets Received With Error Vlan Entries Currently In Use Transmit Packet ErrorsPort detailed Address Entries Currently In Use Packets Received 128-255 Octets Total Packets Received with MAC ErrorsPackets Received 64 Octets Packets Received 65-127 Octets Fragments/Undersize Received Alignment ErrorsRx FCS Errors Jabbers Received Packets Transmitted 1024-1518 Octets Total Transmit ErrorsTx FCS Errors Underrun Errors Rstp BPDUs Received Excessive Collision FramesSTP BPDUs Received STP BPDUs Transmitted Port summary Collision Frames System reset System utilitiesSave all applied changes Reset passwords to defaults Reset configuration to defaults Download file to switch Tftp File Name File TypeTftp Server IP Address Tftp File Path Upload file from switch Ping Trap managerPing Trap flags Multiple Users AuthenticationTrap log Link Up/Down Switching Vlan Name Vlan ID and Name Multicast Packets/Second Broadcast Storm Control ModeMulitcast Storm Control Mode Broadcast Packets/Second Tagged All frames transmitted for this Vlan will be tagged Status Acceptable Frame Types Port configurationMulticast Storm Control Mode Port Vlan ID All. The factory default is Reset configuration MAC filter configurationFilters Destination Port Mask MAC filter summary Switch Gvrp Switch GmrpDestination Port Members 100 Switch configuration Gvrp Mode Gmrp Mode101 102 Max Response Time secs Less Than Group Membership Interval Configuration and statusIgmp snooping Group Membership Interval secs 104 Interface configuration 105 Administrative ModeLAG Name Create LAG Name Membership Conflicts Logical port identifier of the LAG, in the format lag.port106 Mfdb table Member Ports107 Forwarding Ports Gmrp tableComponent Type 109 Igmp snooping table 110 Switch configuration/statusSpanning tree Stats Force Protocol Version Common Spanning Tree CST configuration/statusSpanning Tree Admin Mode Configuration Digest Key 112 113 CST port configuration/status 114 115 Class of serviceStatistics Rstp BPDUs. Transmitted Traffic Class Port access control802.1p priority mapping User Priority 117 118 Force UnauthorizedForce Authorized Quiet Period secs 119 Port status 120 PAE Capabilities Authenticator PAE StateControl Direction Protocol Version 122 Backend State Operating Control Mode Key Transmission Enabled123 124 125 Login Port access privileges Port access summary126 127 Radius 128 Server configuration 129 130 Radius statisticsServer statistics Invalid Server Addresses 131 132 Accounting server configuration Accounting Responses Accounting server statisticsAccounting Requests Accounting Retransmissions Malformed Accounting Responses TimeoutsSecure Http Clear statistics Https Port Https Admin ModeTLS Version SSL Version 136 Secure ShellSSH Version SSH Connections in Use Access Control Lists QoS137 Direction Current Size/Max Size138 Rule configuration ACL identifier139 Rule Action140 141 142 Bandwidth profile configurationSource L4 Port Keyword Source L4 Port Number Destination L4 Port Keyword Destination L4 Port Number 143 Bandwidth profile summaryBandwidth Profile Maximum Bandwidth Traffic class configuration Allocated Minimum Bandwidth144 Weight Interface145 Traffic class summary Accept Byte Count146 Logout Interface allocation summary147 148 149 Determining the software version Obtaining the latest version Upgrading the switch softwareUpgrading the image using Telnet Upgrading the MCU code using Telnet 151 Upgrading the image using web interface Resetting and restarting the switch module Upgrading the MCU code using web interface152 153 154 155 Command Line Interface CLI conventionsCommand name Format Parameters Values156 Comments Special characters157 Str Remotely managing the IXM5414E switch moduleConnecting to the IXM5414E switch module Execute the nth command in history buffer 159 Changing configuration settings 160 IXM5414E switch module system commandsInitial configuration Managing user accounts System commands Address Resolution Protocol ARP cacheForwarding DB Inventory information Show inventory162 Logs Port commands Default disable Format Acceptable values are164 FlowControl Mode Mirroring commands165 Snmp community commands Simple Network Management Protocol Snmp166 167 Format show snmpcommunity Snmp Community Name 168 Status Status of this community. Either enable or disableSnmp trap commands Format show snmptrap Snmp Trap Name Network connectivity System configurationDefault 10.90.90.9x 255.255.255.0 Format Format Config network protocol none/bootp/dhcp Values Format Show network IP Address Telnet170 Format show telnet Telnet Login Timeout minutes User accounts171 Use of zero instead of the letter O Format Config users passwd userDefault No authentication Format Default No encryption Format Login Config prompt173 Show stats port detailed Config syscontactConfig syslocation Config sysname Total Packets Received Without Error Fragments/Undersized Received175 176 Gvrp PDUs Failed Registrations Total Transmit Packet DiscardedBPDUs Received BPDUs Transmitted Show stats switch detailed Show stats port summary178 179 180 Show stats switch summary 181 System utility commandsSystem utilities Show sysinfo 182 Format logout Transfer download commands Default code Format183 184 Transfer upload commandsTftp Server IP Tftp Filename 185 Trap manager Switching configuration commands Show traplog187 Generic Attribute Registration Protocol Garp commands 189 Config garp leavetimerShow garp info Show garp interface Config igmpsnooping interfacemode Igmp snooping commandsConfig igmpsnooping adminmode Config igmpsnooping groupmembershipinterval Config lag adminmode Link Aggregation LAG commandsConfig igmpsnooping mcrtrexpiretime Config lag addport Config lag linktrap Config lag createConfig lag deletelag Config lag deleteport Config macfilter deldest MAC filter commandsConfig macfilter adddest Config macfilter create Show mfdb igmpsnooping Multicast Forwarding Database Mfdb commandsShow macfilter Show mfdb gmrp 195 Show mfdb staticfilteringShow mfdb stats Show mfdb table Spanning tree bridge commands Spanning tree commands Spanning tree Common Spanning Tree CST commands 198 Show spanningtree cst port detailed 199 Show spanningtree cst port summary Spanning tree summary commands Spanning tree port commands Virtual Local Area Network Vlan commands Config vlan port priority Config vlan nameConfig vlan participation Config vlan port acceptframe Config vlan port tagging Show vlan detailed203 Show vlan port Show vlan summary204 Default = see table below Class of Service commandsConfig classofservice 802.1pmapping Show classofservice 802.1pmapping Authentication commands Security configuration commands Ieee 802.1X commands Config dot1x port controlmode Config dot1x adminmodeConfig dot1x defaultlogin Config dot1x login Config dot1x port reauthperiod Config dot1x port quietperiodConfig dot1x port reauthenabled Config dot1x port reauthenticate Show dot1x port detailed Config dot1x port transmitperiodConfig dot1x port users add Config dot1x port users remove Show dot1x port stats Format Show dot1x port stats port Port211 212 Show dot1x port summaryShow dot1x port users Show dot1x summary Radius accounting commands Remote Authentication Dial-In User Service Radius commands Clear radius stats Radius configuration / summary commandsConfig radius maxretransmit Show radius accounting summary 215 Config radius timeoutShow radius stats Show radius summary Radius server commands Server IP Address Show radius server summary217 Secure Socket Layer SSL commands Secure Shell SSH commands Access Control List ACL commands Quality of Service QoS commands Config acl rule match dstip Config acl rule actionConfig acl rule create Config acl rule delete Config acl rule match srcip Config acl rule match everyConfig acl rule match protocol keyword Config acl rule match protocol number 222 Config acl rule match srcl4port numberShow acl detailed Show acl summary BW provisioning BW allocation commands Bandwidth provisioning commands BW provisioning traffic class commands 225 Show bwprovisioning trafficclass allocatedbwShow bwprovisioning trafficclass detailed Show bwprovisioning trafficclass summary 226 227 Contact pin number Label Media direct interface signal 228 Standard Data transmission rate Media type Maximum distance 229 230 231 Bandwidth ProvisioningIeee Secure Shell Remote Authentication Dial-in User ServiceVlan Switching 232 Heading 233Igmp Snooping 234 Link AggregationSpannng Tree Protocol STP 235 Utilities 236Telnet User Accounts 237 238 239 Appendix D CLI Command Tree 240 241 242 Spanningtree 243 244 Show 245 246 Transfer 247 248 Bridging configuration example Config spanningtree bridge priority249 250 Config forwardingdb agetime 251 Ieee 802.1w configuration exampleConfig spanningtree forceversion 802.1w Config spanningtree forceversion 802.1d 252 Vlan configuration exampleConfig vlan create Config vlan port pvid 2 bay.3,bay.4 253 Link aggregation configuration example Show mfdb table all Igmp snooping configuration exampleConfig igmpsnooping adminmode enable Config igmpsnooping mcrtrexpiretime Config acl interface add ext.1 inbound Access Control List configuration exampleConfig acl create Config acl rule create 1 256 Config acl interface add ext.4 inbound Parameter Description Default value Spanning Tree Protocol STP operation257 Variable Description Default value Creating a stable topology258 259 Ieee 802.1D STP port states Role Ieee 802.1w STP port states260 Port state 261 Setting user-changeable STP parametersForward Delay Feature Default value 262 Illustration of STP 263 This example, only the default STP values are used 264 Discarding state 265 Learning state 266 Forwarding state 267 268 Disabled state 269 Troubleshooting STPSpanning Tree Protocol Failure Full/half duplex mismatch 270 Unidirectional link 271 Resource errorsPacket corruption Identifying a data loop 272 Avoiding network problems 273 274 275 Before you call 276 277 Safety and regulatory information General Safety Electrical Safety278 279 Handling electrostatic discharge-sensitive devices Regulatory specifications and disclaimers Safety compliance280 Electromagnetic compatibility EMC Japan EMC Compatibility281 282 RRL Korea User’s Information English translation of the previous notice283 Device 284