ProCurve 6400cl Guía de usuario Pagina 449
- Pagina / 718
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
Access Control Lists (ACLs) for the Series 3400cl and Series 6400cl Switches
Planning an ACL Application on a Series 3400cl or Series 6400cl Switch
Table 10-3. ACL Rule and Mask Resource Usage
ACE Type Per-Port Rule
Usage
Per-Port
Masks Usage
Standard ACLs
Implicit deny any (automatically included in any standard ACL, but not displayed by 1 1
show access-list < acl-# > command).
First ACE entered 1 1
Next ACE entered with same ACL mask
1
1 0
Next ACE entered with a different ACL mask
1
1 1
Closing ACL with a deny any or permit any ACE having the same ACL mask as the 0 0
preceding ACE
Closing ACL with a deny any or permit any ACE having a different ACL mask than 1 1
the preceding ACE
Extended ACLs
Implicit deny ip an any (automatically included in any standard ACL, but not 1 1
displayed by show access-list < acl-# > command).
First ACE entered 1 1
Next ACE entered with same SA/DA ACL mask and same IP or TCP/UDP protocols
1 0
specified
2
Next ACE entered with any of the following differences from preceding ACE in the 1 1
list:
– Different SA or DA ACL mask
– Different protocol (IP as opposed to TCP/UDP) specified in either the SA or DA
3
Closing an ACL with a deny ip any any or permit ip any any ACE preceded by an IP 0 0
ACE with the same SA and DA ACL masks
Closing an ACL with a deny ip any any or permit ip any any ACE preceded by an IP 1 1
ACE with different SA and/or DA ACL masks
1
In a given standard ACL, consecutive ACEs must have identical ACL masks in their SA entries to avoid using a separate
per-port mask for each ACE. In a given standard ACL, If two ACEs having identical SA ACL masks are separated by an
ACE with a different SA ACL mask, then three per-port masks are used instead of two; one for each sequential change
in SA ACL masks. Thus, you can conserve per-port resources by grouping SA entries with the same ACL mask together.
2
In a given extended ACL, consecutive ACEs must have the same SA and DA ACL mask and the same protocol application
(IP as opposed to TCP/UDP) to avoid using a separate per-port mask for each ACE. If consecutive ACEs have different
SA or DA ACL masks, or different protocol applications, then each such ACE consumes a separate per-port mask.
3
TCP and UDP are the same for the purpose of determining per-port mask use. Also, actual TCP or UDP port numbers can
vary between ACEs without affecting per-port mask usage. However, if one ACE specifies a TCP/UDP source port and
another does not, another per-port mask will be used.
10-21
- ProCurve Switches 1
- ProCurve 3
- Series 5300xl Switches 3
- Series 4200vl Switches 3
- Series 3400cl Switches 3
- 3 GVRP 7
- 6 Spanning-Tree Operation 9
- Switch Meshing 10
- Effectively 11
- Switches 13
- Series 6400cl Switches 15
- 11 IP Routing Features 17
- 6400cl, and 4200vl Switches 22
- Product Documentation 25
- Feature Index 26
- Getting Started 31
- Conventions 33
- Command Prompts 34
- Screen Simulations 34
- Port Identity Examples 34
- Sources for More Information 35
- Networking Web Site 37
- Online Help 38
- Need Only a Quick Start? 39
- Network 39
- Static Virtual LANs (VLANs) 41
- Port-Based VLANs 45
- Protocol-Based VLANs 45
- Designated VLANs 45
- Static VLAN Operation 47
- VLAN Environments 48
- VLAN Operation 49
- Routing Options for VLANs 50
- Overlapping (Tagged) VLANs 50
- VLAN Operating Rules 54
- Multiple VLAN Considerations 58
- Correct It 60
- Switch 8000M 61
- 5308L Switch 61
- (Routing Enabled) 61
- Configuring VLANs 62
- Adding or Editing VLAN Names 65
- VLAN Parameters 68
- [ voice] 76
- [Vlan Configuration] 79
- [Add/Remove VLANs] 79
- 802.1Q VLAN Tagging 80
- ■ In switch X: 81
- ■ In switch Y: 81
- VID Numbers 82
- Special VLAN Types 85
- The Secure Management VLAN 86
- Preparation 88
- Deleting the Management VLAN 90
- Voice VLANs 91
- Features 93
- VLAN MAC Address 94
- Port Trunks 94
- Port Monitoring 94
- VLAN Restrictions 95
- General Operation 100
- “Unknown VLANs” 103
- GVRP Enabled 104
- (Required for Unknown 104
- VLAN operation.) 104
- Unknown VLAN Settings 104
- Default: 104
- Advertising and Joining 105
- GVRP and VLAN Access Control 107
- Planning for GVRP Operation 108
- Configuring GVRP On a Switch 109
- GVRP Operating Notes 114
- Contents 117
- Overview 118
- IGMP Terms 120
- Basic Operation 121
- Enhancements 121
- 6400cl Switches 122
- How IGMP Operates 127
- Automatic Fast-Leave IGMP 129
- Forced Fast-Leave IGMP 132
- Using the Switch as Querier 134
- Filtering 135
- Introduction 139
- Feature Overview 140
- PIM-DM Operation 140
- Multicast Flow Management 143
- Terminology 145
- PIM-DM Operating Rules 146
- 5300xl Switches 147
- 5300XL #3 156
- 5308XL #1 156
- 5300XL #2 156
- Command Page 158
- Displaying PIM Route Data 159
- Displaying PIM Status 163
- 5-13 on page 5-31 168
- Operating Notes 170
- Troubleshooting 172
- Applicable RFCs 176
- Multicast Routing MIB 177
- Spanning-Tree Operation 179
- 6400cl switches) 185
- STP (802.1D) 186
- 3400cl and 6400cl Switches 186
- Spanning Tree (RSTP) 189
- Configuring RSTP 191
- CLI: Configuring RSTP 192
- Menu: Configuring RSTP 198
- Menu: Configuring 802.1D STP 200
- *) at the 201
- CLI: Configuring 802.1D STP 203
- STP Fast Mode 207
- Mode = Uplink) only on the 209
- MSTP Structure 224
- Common Spanning Tree (CST) 225
- How MSTP Operates 227
- Region “X” 228
- Operating Rules 231
- Steps for Configuring MSTP 235
- Parameters 237
- Displaying MSTP Statistics 252
- Switch Meshing Fundamentals 264
- Backward 268
- Compatibility Note 268
- Configuring Switch Meshing 271
- Viewing Switch Mesh Status 274
- Flooded Traffic 278
- Switch Mesh Domain 279
- Port Mode in RSTP 281
- Static VLANs 283
- Mesh Design Optimization 284
- Bandwidth More Effectively 289
- Apply new DSCP markers 292
- Not e On Using 298
- Mult ipl e 298
- Cr iter i a 298
- 3400cl/6400cl Switches 305
- No Override 312
- QoS UDP/TCP Priority 313
- UDP Port Number 314
- QoS IP-Device Priority 319
- No-override 320
- The DSCPs for this 323
- 802.1p priority level 323
- DSCP Policies 324
- Configured in this step 324
- Default ToS Configuration 326
- Current ToS Configuration 326
- Basis of Incoming DSCP 327
- ToS Option: 336
- Switches Only) 338
- QoS VLAN-ID (VID) Priority 340
- No- override 341
- Priorities 345
- Configured 345
- QoS Source-Port Priority 346
- No-override. See figure 349
- No-override) 349
- Configured in 351
- QoS Messages in the CLI 360
- Caution Regarding 375
- Routing 375
- ACL Operation 376
- The Packet-Filtering Process 377
- Planning an ACL Application 380
- Security 381
- Matches 384
- Access Control Entry (ACE) 385
- IP Address Mask 386
- ACL Configuration Structure 390
- Standard ACL Structure 391
- Note: The optional log 392
- ACL Configuration Factors 393
- General ACE Rules 396
- ASCII-STR >) 399
- • ip — any IP packet 403
- • tcp — only tcp packets 403
- • udp — only udp packets 403
- Configuring a Named ACL 408
- Displaying ACL Data 412
- Inspect the ACLs as follows: 415
- Offline 417
- Deleting Any ACE from an ACL 418
- Creating an ACL Offline 420
- Enable ACL “Deny” Logging 423
- General ACL Operating Notes 427
- Features Common to All ACLs 439
- Note on Implicit 443
- Switch Resource Usage 445
- Limiting Feature Usage 446
- Standard ACLs: 447
- Extended ACLs: 448
- ■ In the CLI: 450
- Performance 456
- Apply It to an Interface 472
- Numbered ACLs 10-52 475
- [Shift] [?] key combination 483
- Display an ACL Summary 491
- General Editing Rules 498
- ACL Logging Operation 504
- 10.38.110.54 506
- 10.38.100.127 506
- Console 506
- IP Routing Features 511
- Overview of IP Routing 513
- IP Interfaces 514
- IP Tables and Caches 514
- ARP Cache Table 515
- IP Route Table 515
- IP Forwarding Cache 516
- IP Route Exchange Protocols 517
- Configuring ARP Parameters 521
- Enabling Proxy ARP 523
- Changing the TTL Threshold 524
- Configuring ICMP 525
- Configuring Static IP Routes 527
- Static IP Route Parameters 528
- Configuring a “Null” Route 530
- Configuring RIP 531
- RIP Parameters and Defaults 532
- Configuring RIP Parameters 533
- Displaying RIP Information 538
- Configuring OSPF 544
- Designated Router Election 545
- Configuration Rules 549
- OSPF Parameters 549
- Enabling OSPF 550
- Assigning OSPF Areas 550
- Assigning VLANs to an Area 553
- Modifying Interface Defaults 553
- OSPF Interface Parameters 553
- Assigning Virtual Links 555
- Administrative Distance 560
- Displaying OSPF Information 563
- VLAN or IP Address 569
- Information 574
- ProCurve# show ip ospf 578
- Configuring IRDP 583
- Enabling IRDP Globally 584
- Displaying IRDP Information 585
- Configuring DHCP Relay 586
- Option 82 Server Support 588
- Option 82 Field Content 590
- Forwarding Policies 593
- Multinetted VLANs 597
- DHCP Packet Forwarding 601
- Configuring a Helper Address 602
- 4200vl and 3400cl Switches 604
- Configuration 608
- There are three ranges: 609
- Static NAT Operating Rules 611
- Configuring Static NAT 611
- The “Public” region within 612
- Static NAT Operating Notes 613
- Router Redundancy Using XRRP 615
- Introduction to XRRP 617
- Overview of XRRP Operation 619
- XRRP Fail-Over Operation 621
- Multiple VLAN Operation 622
- XRRP Failback Log Messages 630
- XRRP Operating Notes 631
- 4108GL Switch 632
- Switch (Routing Enabled) 632
- Configuring XRRP 634
- Enabling and Disabling XRRP 637
- Configuration Examples 639
- See the figure on page 12-9 640
- Displaying XRRP Data 641
- Message Meaning 646
- 4200vl switches 654
- General Stacking Operation 655
- Operating Rules for Stacking 657
- Specific Rules 658
- Configuring Stack Management 659
- and Configure Stacking 663
- [E] (for Edit). Then 664
- [E] (for Edit) 666
- [Tab] to select the 666
- [B] (for Back) to return to 670
- [Return] 674
- Monitoring Stack Status 675
- Stacking 679
- Big_Waters 683
- Yes. When 685
- SN of 2, you 687
- MAC Address for 688
- Stack Commander 688
- Auto Join disabled 689
- Auto Join parameter 690
- The switch number 692
- (SN) for the “North 692
- Sea” switch is “3” 692
- Transmission Interval 694
- Status Messages 695
- Numerics 697
- 2 – Index 698
- Index – 3 699
- 4 – Index 700
- Index – 5 701
- 6 – Index 702
- Index – 7 703
- 8 – Index 704
- Index – 9 705
- 10 – Index 706
- Index – 11 707
- 12 – Index 708
- Index – 13 709
- 14 – Index 710
- Index – 15 711
- 16 – Index 712
- Index – 17 713
- 18 – Index 714
- Index – 19 715
- 20 – Index 716
- 5990-6051 718
Relacionado con productos y manuales para Los conmutadores de red ProCurve 6400cl
Los conmutadores de red ProCurve 8212zl Manual
(667 paginas)
(667 paginas)
Los conmutadores de red ProCurve 5300xl Especificaciones
(108 paginas)
(108 paginas)
Los conmutadores de red ProCurve 5400zl Especificaciones
(110 paginas)
(110 paginas)
Los conmutadores de red ProCurve 8200zl Guía de usuario
(360 paginas)
(360 paginas)
Los conmutadores de red ProCurve 8200zl Guía de usuario
(195 paginas)
(195 paginas)
Los conmutadores de red ProCurve 6200yl Especificaciones
(130 paginas)
(130 paginas)
Los conmutadores de red ProCurve 8200zl Especificaciones
(144 paginas)
(144 paginas)
© 2020, manymanuals.es. Todos los derechos reservados | 0.045 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales