Manuals / Intel / Computer Equipment / Switch

Intel IXM5414E manual Rule configuration, ACL identifier, 139

Models: IXM5414E

1 294

Download 294 pages 21.55 Kb

Page 149

Image 149

Summary

This panel displays a summary of all ACLs on the switch.

ACL	The ACL identifier.
Rules	The number of rules that are associated with this ACL.
Ports	The interfaces that are associated with this ACL.
Direction	The packet filtering direction for the ACL on the interface.

Click the Refresh button to update the screen with the latest information.

Rule configuration

This panel configures the rules associated with an ACL When the screen first displays you will see the first four fields described below. If you select False as the Match Entry criteria and click Apply, the screen will be refreshed and you will see the remaining fields. Clicking one of the configure buttons shown on that screen will display a third screen allowing you to configure the match criterion you selected.

Intel® Blade Server Ethernet Switch Module IXM5414E

139

Page 149

Image 149

Intel IXM5414E manual Rule configuration, ACL identifier, 139

Contents

C66107-004 Page Contents Page Safety To Disconnect To ConnectVii StatementViii XxCAUTION Page Page Related publications Major components of the IXM5414E switch module Ports Specifications and featuresPerformance features Garp Gmrp Gvrp StandardsManagement Intel Blade Server Ethernet Switch Module IXM5414E Network Cable Support Ethernet interface requirements Module Bay Switch-module function Installation guidelinesSystem reliability considerations Handling static-sensitive devicesInstalling the IXM5414E switch module Sbce Intel Blade Server Ethernet Switch Module IXM5414E Removing the IXM5414E switch module Intel Blade Server Ethernet Switch Module IXM5414E Intel Blade Server Ethernet Switch Module IXM5414E LEDs Information panelIntel Blade Server Ethernet Switch Module IXM5414E Chassis configuration and operation Intel Blade Server Ethernet Switch Module IXM5414E overviewSwitch module management and control IP addresses and Snmp community names Module bay number Default IP addressTraps Management Information Bases MIB Authentication failurePort mirroring Topology change Spanning Tree Protocol STPAuthentication Switching conceptsSimple Network Management Protocol Snmp Packet forwardingSpanning Tree Protocol STP Ieee 802.1Q VLANs Virtual Local Area Networks VlanForwarding rules between ports Ieee 802.1Q Vlan packet forwardingIeee 802.1Q Tag Ieee 802.1Q Vlan tagsEgress rules Port Vlan IDTagging and untagging Generic Attribute Registration Protocol Garp Ieee 802.1Q Vlan configurationStatic MAC filtering Garp Vlan Registration Protocol Gvrp Group Service Requirements InformationGarp Multicast Registration Protocol Gmrp Group Membership InformationInternet Group Management Protocol Igmp snooping Distribution method Static LAGsDynamic Host Configuration Protocol Dhcp Authentication server AuthenticatorSecurity IeeeSecure Shell SSH Radius authenticationLocal authentication Secure Socket Layer SSL SSL Feature Component TypeBandwidth Allocation Profile Quality of Service QoSBandwidth provisioning Access Control Lists ACL Intel Blade Server Ethernet Switch Module IXM5414E Introduction Remotely managing the switch moduleGetting started Intel Blade Server Ethernet Switch Module IXM5414E QOS System MAC Address ARP cacheInventory information System Description Maintenance LevelMachine Type Machine ModelSystem description ConfigurationOperating System Network Processing DeviceNetwork connectivity Burned In MAC Address Default GatewayNetwork Configuration Protocol Telnet Telnet Login Timeout minutesUser accounts Maximum Number of Telnet SessionsConfirm Password PasswordSnmp v3 Access Mode UserAuthentication Protocol Login configurationEncryption Protocol Encryption KeyLogin session Connection From Login summaryID of this row Login Users User loginMethod List 802.1X Port Security UsersAuthentication is complete Forwarding database ConfigurationSearch Aging Interval secsLearned FilterMAC Address Search IfIndexMessage log LogsGmrp Learned OtherDays, hours, minutes and seconds Event logTime Entry PortFilename TaskIDProbe Flow Control Mode Admin ModeLacp Mode Physical ModeSummary Forwarding State STP ModePort Type Mirroring Control ModeLink Status Link TrapPort to be Mirrored Port Mirroring ModeName Community configurationCommunity Client IP Mask Trap receiver configurationClient IP Address Trap receiver summary Disable EnableSupported Management Information Bases MIB IP AddressDescription RFC title or MIB description Switch detailedStatistics Octets Received Packets Received Without ErrorUnicast Packets Received Multicast Packets ReceivedOctets Transmitted Packets Transmitted Without ErrorsUnicast Packets Transmitted Multicast Packets TransmittedPackets Received With Error Switch summaryTotal Packets Received Without Errors Port detailed Transmit Packet ErrorsAddress Entries Currently In Use Vlan Entries Currently In UsePackets Received 64 Octets Total Packets Received with MAC ErrorsPackets Received 65-127 Octets Packets Received 128-255 OctetsRx FCS Errors Alignment ErrorsJabbers Received Fragments/Undersize ReceivedTx FCS Errors Total Transmit ErrorsUnderrun Errors Packets Transmitted 1024-1518 OctetsSTP BPDUs Received Excessive Collision FramesSTP BPDUs Transmitted Rstp BPDUs ReceivedPort summary Collision Frames Save all applied changes System resetSystem utilities Reset passwords to defaults Reset configuration to defaultsDownload file to switch Tftp Server IP Address File TypeTftp File Path Tftp File NameUpload file from switch Ping Trap managerTrap flags PingTrap log AuthenticationLink Up/Down Multiple UsersSwitching Vlan Name Vlan ID and NameMulitcast Storm Control Mode Broadcast Storm Control ModeBroadcast Packets/Second Multicast Packets/SecondTagged All frames transmitted for this Vlan will be tagged StatusMulticast Storm Control Mode Port configurationPort Vlan ID Acceptable Frame TypesAll. The factory default is Filters Reset configurationMAC filter configuration Destination Port Mask MAC filter summaryDestination Port Members Switch GvrpSwitch Gmrp 100 Switch configuration101 Gvrp ModeGmrp Mode 102 Igmp snooping Configuration and statusGroup Membership Interval secs Max Response Time secs Less Than Group Membership Interval104 Interface configurationLAG Name Create Administrative ModeLAG Name 105106 Membership ConflictsLogical port identifier of the LAG, in the format lag.port 107 Mfdb tableMember Ports Component Gmrp tableType Forwarding Ports109 Igmp snooping tableSpanning tree Switch configuration/statusStats 110Spanning Tree Admin Mode Common Spanning Tree CST configuration/statusConfiguration Digest Key Force Protocol Version112 113 CST port configuration/status114 Statistics Class of serviceRstp BPDUs. Transmitted 115802.1p priority mapping Port access controlUser Priority Traffic Class117 Force Authorized Force UnauthorizedQuiet Period secs 118119 Port status120 Control Direction Authenticator PAE StateProtocol Version PAE Capabilities122 Backend State123 Operating Control ModeKey Transmission Enabled 124 125 Login126 Port access privilegesPort access summary 127 Radius128 Server configuration129 Server statistics Radius statisticsInvalid Server Addresses 130131 132 Accounting server configurationAccounting Requests Accounting server statisticsAccounting Retransmissions Accounting ResponsesSecure Http TimeoutsClear statistics Malformed Accounting ResponsesTLS Version Https Admin ModeSSL Version Https PortSSH Version Secure ShellSSH Connections in Use 136137 Access Control ListsQoS 138 DirectionCurrent Size/Max Size 139 Rule configurationACL identifier 140 RuleAction 141 Source L4 Port Keyword Source L4 Port Number Bandwidth profile configurationDestination L4 Port Keyword Destination L4 Port Number 142Bandwidth Profile Bandwidth profile summaryMaximum Bandwidth 143144 Traffic class configurationAllocated Minimum Bandwidth 145 WeightInterface 146 Traffic class summaryAccept Byte Count 147 LogoutInterface allocation summary 148 149 Determining the software versionUpgrading the image using Telnet Upgrading the switch softwareUpgrading the MCU code using Telnet Obtaining the latest version151 Upgrading the image using web interface152 Resetting and restarting the switch moduleUpgrading the MCU code using web interface 153 154 Command name Command Line Interface CLI conventionsFormat 155156 ParametersValues 157 CommentsSpecial characters Connecting to the IXM5414E switch module Remotely managing the IXM5414E switch moduleExecute the nth command in history buffer Str159 Changing configuration settingsInitial configuration IXM5414E switch module system commandsManaging user accounts 160Forwarding DB System commandsAddress Resolution Protocol ARP cache 162 Inventory informationShow inventory Logs Port commands164 Default disable FormatAcceptable values are 165 FlowControl ModeMirroring commands 166 Snmp community commandsSimple Network Management Protocol Snmp 167 Format show snmpcommunity Snmp Community NameSnmp trap commands Status Status of this community. Either enable or disableFormat show snmptrap Snmp Trap Name 168Default 10.90.90.9x 255.255.255.0 Format System configurationFormat Config network protocol none/bootp/dhcp Values Network connectivity170 Format Show network IP AddressTelnet 171 Format show telnet Telnet Login Timeout minutesUser accounts Default No authentication Format Format Config users passwd userDefault No encryption Format Use of zero instead of the letter O173 LoginConfig prompt Config syslocation Config syscontactConfig sysname Show stats port detailed175 Total Packets Received Without ErrorFragments/Undersized Received 176 BPDUs Received Total Transmit Packet DiscardedBPDUs Transmitted Gvrp PDUs Failed Registrations178 Show stats switch detailedShow stats port summary 179 180 Show stats switch summarySystem utilities System utility commandsShow sysinfo 181182 Format logout183 Transfer download commandsDefault code Format Tftp Server IP Transfer upload commandsTftp Filename 184185 Trap manager 187 Switching configuration commandsShow traplog Generic Attribute Registration Protocol Garp commands Show garp info Config garp leavetimerShow garp interface 189Config igmpsnooping adminmode Igmp snooping commandsConfig igmpsnooping groupmembershipinterval Config igmpsnooping interfacemodeConfig igmpsnooping mcrtrexpiretime Link Aggregation LAG commandsConfig lag addport Config lag adminmodeConfig lag deletelag Config lag createConfig lag deleteport Config lag linktrapConfig macfilter adddest MAC filter commandsConfig macfilter create Config macfilter deldestShow macfilter Multicast Forwarding Database Mfdb commandsShow mfdb gmrp Show mfdb igmpsnoopingShow mfdb stats Show mfdb staticfilteringShow mfdb table 195Spanning tree bridge commands Spanning tree commandsSpanning tree Common Spanning Tree CST commands 198 Show spanningtree cst port detailed199 Show spanningtree cst port summarySpanning tree summary commands Spanning tree port commandsVirtual Local Area Network Vlan commands Config vlan participation Config vlan nameConfig vlan port acceptframe Config vlan port priority203 Config vlan port taggingShow vlan detailed 204 Show vlan portShow vlan summary Config classofservice 802.1pmapping Class of Service commandsShow classofservice 802.1pmapping Default = see table belowAuthentication commands Security configuration commandsIeee 802.1X commands Config dot1x defaultlogin Config dot1x adminmodeConfig dot1x login Config dot1x port controlmodeConfig dot1x port reauthenabled Config dot1x port quietperiodConfig dot1x port reauthenticate Config dot1x port reauthperiodConfig dot1x port users add Config dot1x port transmitperiodConfig dot1x port users remove Show dot1x port detailed211 Show dot1x port statsFormat Show dot1x port stats port Port Show dot1x port users Show dot1x port summaryShow dot1x summary 212Radius accounting commands Remote Authentication Dial-In User Service Radius commandsConfig radius maxretransmit Radius configuration / summary commandsShow radius accounting summary Clear radius statsShow radius stats Config radius timeoutShow radius summary 215Radius server commands 217 Server IP AddressShow radius server summary Secure Socket Layer SSL commands Secure Shell SSH commandsAccess Control List ACL commands Quality of Service QoS commandsConfig acl rule create Config acl rule actionConfig acl rule delete Config acl rule match dstipConfig acl rule match protocol keyword Config acl rule match everyConfig acl rule match protocol number Config acl rule match srcipShow acl detailed Config acl rule match srcl4port numberShow acl summary 222BW provisioning BW allocation commands Bandwidth provisioning commandsBW provisioning traffic class commands Show bwprovisioning trafficclass detailed Show bwprovisioning trafficclass allocatedbwShow bwprovisioning trafficclass summary 225226 227 Contact pin number Label Media direct interface signal228 Standard Data transmission rate Media type Maximum distance 229230 Ieee 231Bandwidth Provisioning Vlan Switching Remote Authentication Dial-in User Service232 Secure ShellIgmp Snooping Heading233 Spannng Tree Protocol STP 234Link Aggregation 235 Telnet 236User Accounts Utilities237 238 239 Appendix D CLI Command Tree240 241 242 Spanningtree 243244 Show245 246 Transfer247 248 249 Bridging configuration exampleConfig spanningtree bridge priority 250 Config forwardingdb agetimeConfig spanningtree forceversion 802.1w Ieee 802.1w configuration exampleConfig spanningtree forceversion 802.1d 251Config vlan create Vlan configuration exampleConfig vlan port pvid 2 bay.3,bay.4 252253 Link aggregation configuration exampleConfig igmpsnooping adminmode enable Igmp snooping configuration exampleConfig igmpsnooping mcrtrexpiretime Show mfdb table allConfig acl create Access Control List configuration exampleConfig acl rule create 1 Config acl interface add ext.1 inbound256 Config acl interface add ext.4 inbound257 Parameter Description Default valueSpanning Tree Protocol STP operation 258 Variable Description Default valueCreating a stable topology 259 Ieee 802.1D STP port states260 Ieee 802.1w STP port statesPort state RoleForward Delay Setting user-changeable STP parametersFeature Default value 261262 Illustration of STP263 This example, only the default STP values are used264 Discarding state265 Learning state266 Forwarding state267 268 Disabled stateSpanning Tree Protocol Failure Troubleshooting STPFull/half duplex mismatch 269270 Unidirectional linkPacket corruption Resource errorsIdentifying a data loop 271272 Avoiding network problems273 274 275 Before you call276 277 Safety and regulatory information278 General SafetyElectrical Safety 279 Handling electrostatic discharge-sensitive devices280 Regulatory specifications and disclaimersSafety compliance 281 Electromagnetic compatibility EMCJapan EMC Compatibility 282 RRL Korea283 English translation of the previous noticeDevice User’s Information284

Summary

ACL

The ACL identifier.

Ports

Direction

Rule configuration

Intel® Blade Server Ethernet Switch Module IXM5414E

139