Riverstone Networks RS 8000 Podręcznik Użytkownika Strona 541
- Strona / 718
- Spis treści
- ROZWIĄZYWANIE PROBLEMÓW
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
Riverstone Networks RS Switch Router User Guide Release 8.0 24-11
Access Control List Configuration Using ACLs
For example, you can define an IP policy that causes all telnet packets travelling from source network 9.1.1.0/24 to
destination network 15.1.1.0/24 to be forwarded to destination address 10.10.10.10. You use a Profile ACL to define
the selection criteria (in this case, telnet packets travelling from source network 9.1.1.0/24 to destination network
15.1.1.0/24). Then you use an
ip-policy
command to specify what happens to packets that match the selection
criteria (in this example, forward them to address 10.10.10.10). The following commands illustrate this example.
This command creates a Profile ACL called prof1 that uses as its selection criteria all telnet packets travelling from
source network 9.1.1.0/24 to destination network 15.1.1.0/24:
This Profile ACL is then used in conjunction with the
ip-policy
command to cause packets matching prof1’s
selection criteria (that is, telnet packets travelling from 9.1.1.0/24 to 15.1.1.0/24) to be forwarded to 10.10.10.10:
See Chapter 20, "IP Policy-Based Forwarding Configuration" for more information on using the
ip-policy
command.
Using Profile ACLs with the Traffic Rate Limiting Facility
Traffic rate limiting is a mechanism that allows you to control bandwidth usage of incoming traffic on a per-flow basis.
A flow meeting certain criteria can have its packets re-prioritized or dropped if its bandwidth usage exceeds a specified
limit.
For example, you can cause packets in flows from source address 1.2.2.2 to be dropped if their bandwidth usage
exceeds 10 Mbps. You use a Profile ACL to define the selection criteria (in this case, flows from source address
1.2.2.2). Then you use a
rate-limit
command to specify what happens to packets that match the selection criteria
(in this example, drop them if their bandwidth usage exceeds 10 Mbps). The following commands illustrate this
example.
This command creates a Profile ACL called prof2 that uses as its selection criteria all packets originating from source
address 1.2.2.2:
rs(config)#
acl prof1 permit ip 9.1.1.0/24 15.1.1.0/24 any any telnet 0
rs(config)#
ip-policy p5 permit profile prof1 next-hop-list 10.10.10.10
rs(config)#
acl prof2 permit ip 1.2.2.2
- RS Switch Router 1
- User Guide 1
- COPYRIGHT NOTICES 2
- RIVERSTONE NETWORKS, INC 8
- AGREEMENT 8
- TABLE OF CONTENTS 13
- LIST OF FIGURES 27
- LIST OF TABLES 31
- 1 INTRODUCTION 33
- 1.2 DOCUMENT CONVENTIONS 34
- 2 MAINTAINING CONFIGURATION 35
- 3 CLI AND RS BASICS 43
- 3.6 SETTING CLI PARAMETERS 49
- 3.7 NAMING RS PORTS 50
- 3.7.1 Port Type 51
- 3.7.2 Slot Number 51
- 3.7.3 Port Number 51
- 3.7.4 Channel Number 53
- 1000BASE-SXG8M-GSXB1-02 54
- CONTROL MODULES 57
- 4.2.2 Removing the Line Card 58
- Online Offline 60
- PC slot 1 60
- G8M-CM2-128 CONTROL MODULE 60
- PC slot 0 60
- (RS 8600 ONLY) 61
- Switching Fabric 62
- RS 38000 ONLY) 63
- 4.7 HOT SWAPPING A WIC 64
- ADDRESS-BASED) 65
- 5.3 VLAN OVERVIEW 66
- 5.3.1 RS VLAN Support 67
- 5.3.2 Configuration Examples 68
- AND 802.1Q SUPPORT) 69
- 70
- 5.6 CONFIGURING SPANNING TREE 71
- Setting the Bridge Priority 72
- Setting a Port Priority 73
- Assigning Port Costs 73
- Defining the Maximum Age 74
- 5.6.3 STP Dampening 75
- 5.7.2 Adding Ports to a VLAN 76
- 5.10 MONITORING BRIDGING 78
- 5.11 GARP/GVRP 79
- 5.11.3 Configuration Example 81
- Multiple Customer VLANs 84
- 6 SMARTTRUNK CONFIGURATION 101
- 6.1.1 Creating a SmartTRUNK 102
- Timesaver 103
- CONTROL PROTOCOL (LACP) 105
- 6.4.1 SLR Water-marks 109
- 6.4.2 Polling intervals 109
- Using Low Water-Mark Events 112
- Redistribution of IP Flows 112
- 7 CMTS CONFIGURATION GUIDE 113
- DOCSIS CMTSG8M-CMTSA-4X1 114
- US 1 US 2 US 3 US 4 IF DS 114
- 7.3.1 Headend Certification 115
- 7.3.2 IF-RF-Upconverter 115
- 7.3.3 Diplex Filters 115
- RS-8000 with 116
- DOCSIS CMTS 116
- DOWNSTREAM 117
- RECEIVER 119
- ! Configure the RS 124
- ! Configure the VLANs 124
- ! MOONLINK 124
- Client-VLAN Bindings 130
- 7.8 ANTI-SPOOFING 132
- 7.8.2 Anti-IP-spoofing 133
- Static Anti-IP Spoofing 134
- 8 ATM CONFIGURATION GUIDE 135
- 8.1 CONFIGURING ATM PORTS 136
- Cell Scrambling 137
- Cell Mapping 137
- VPI Bit Allocation 137
- 8.3 TRAFFIC SHAPING 140
- 8.4 TRAFFIC MANAGEMENT 142
- Relative Latency 143
- 8.5 BRIDGING ATM TRAFFIC 149
- 8.6 ROUTING ATM TRAFFIC 152
- 8.6.1 Peer Address Mapping 155
- ATM Cloud 156
- 8.7 CONFIGURING PPP (OC-12) 157
- DSL Modem 158
- 9 PACKET-OVER-SONET 161
- CONFIGURATION GUIDE 161
- SWITCHING 163
- 9.5 MONITORING POS PORTS 166
- 9.6 EXAMPLE CONFIGURATIONS 166
- 10 DHCP CONFIGURATION GUIDE 171
- 10.6 SECONDARY SUBNETS AND 176
- DIRECTLY-CONNECTED CLIENTS 176
- 11 IP ROUTING CONFIGURATION 179
- PARAMETERS 180
- 11.2.4 Unnumbered Interfaces 181
- 11.3 CONFIGURING JUMBO FRAMES 182
- at port et.3.1: 183
- 20:13a09f exit-port et.3.1 183
- RESOLUTION PROTOCOL (RARP) 184
- 11.5.3 Monitoring RARP 185
- 11.8 CONFIGURING IP HELPER 186
- 11.13 HARDWARE ROUTING TABLE 189
- 11.15 FORWARDING MODE 190
- Defining a Profile 191
- Applying a Profile 191
- Enabling a Port 191
- Access Control Lists (ACLs) 192
- Rate Limiting 192
- Quality of Service (QoS) 192
- L4 Bridging 192
- 11.18 CONFIGURATION EXAMPLES 196
- 12 VRRP CONFIGURATION GUIDE 197
- Configuration of Router R1 198
- Configuration for Router R2 199
- 10.0.0.1/16 201
- 10.0.0.2/16 201
- 10.0.0.3/16 201
- Configuration of Router R2 203
- Configuration of Router R3 204
- 12.2 ADDITIONAL CONFIGURATION 205
- 12.3 MONITORING VRRP 206
- 12.3.1 ip-redundancy trace 207
- 12.3.2 ip-redundancy show 207
- 12.4 VRRP CONFIGURATION NOTES 209
- 13 RIP CONFIGURATION GUIDE 211
- 13.3 MONITORING RIP 214
- 13.4 CONFIGURATION EXAMPLE 215
- 14 OSPF CONFIGURATION GUIDE 217
- 14.1 OSPF MULTIPATH 218
- 14.2 CONFIGURING OSPF 218
- 14.3 SETTING THE ROUTER ID 218
- 14.4 ENABLING OSPF 219
- 14.5 CONFIGURING OSPF AREAS 219
- 14.5.2 Configuring Stub Areas 220
- 14.8 CREATING VIRTUAL LINKS 224
- Setting Route Preference 227
- 14.10 MONITORING OSPF 228
- command: 229
- Figure 14-1 Exporting to OSPF 234
- 15 IS-IS CONFIGURATION GUIDE 235
- 15.3 ENABLING IS-IS ON THE RS 236
- 15.4.3 Setting the System ID 237
- Authentication Within an Area 238
- SNP Authentication 239
- Network Topology Overview 242
- IS-IS Area 1 243
- Area 49.da02 244
- IS-IS Area 2 244
- IS-IS Area 3 245
- IS-IS Area 4 246
- R1 Configuration 247
- R2 Configuration 248
- R3 Configuration 249
- R4 Configuration 250
- R5 Configuration 251
- R6 Configuration 252
- R7 Configuration 253
- R8 Configuration 253
- R9 Configuration 254
- C10 Configuration 255
- C10 Configuration (continued) 256
- R11 Configuration 257
- 16 BGP CONFIGURATION GUIDE 259
- 16.2 BASIC BGP TASKS 260
- 16.2.4 Adding a BGP Peer 262
- 16.2.5 Starting BGP 262
- BGP Confederation 265
- 16.2.10 Using Route Maps 267
- Enabling BGP Accounting 269
- IBGP Routing Group Example 275
- ; 279
- AS-64902 281
- AS-64901 281
- AS-64900 AS-64899 281
- Notes on Using Communities 286
- Physical Link 288
- Peering Relationship 288
- Information Flow 288
- Using the local-pref Option 289
- Using the set-pref Option 289
- 212.19.199.62/24 291
- 212.19.198.1/24 291
- 212.19.192.2/24 291
- 194.109.86.6 194.109.86.5 291
- 192.68.222.1 293
- 192.68.20.2 293
- 192.68.20.1 293
- 172.16.30.2 293
- 16.3.10 Route Map Example 300
- EBGP Accounting Example 301
- IBGP Accounting Example 303
- BGP DSCP Accounting 305
- 17 MPLS CONFIGURATION 309
- 17.1.1 Labels 310
- Label Distribution Protocols 314
- Label Advertising Mode 315
- Label Retention Mode 315
- Output Tag Table (OTT) 316
- Incoming Label Map (ILM) 317
- Context Address Memory (CAM) 317
- Table Lookups at Ingress LSRs 317
- Table Lookups at Transit LSRs 317
- Table Lookups at Egress LSRs 317
- 17.3 RSVP CONFIGURATION 321
- 17.3.2 RSVP Refresh Intervals 323
- 17.3.3 RSVP Hello Packets 324
- 17.3.4 Authentication 325
- 17.3.6 RSVP Refresh Reduction 326
- Message ID Extensions 327
- 17.4 LDP CONFIGURATION 329
- 17.4.3 Remote Peers 331
- 17.4.4 Loop Detection 331
- Ingress LSR Configuration 335
- Transit LSR Configuration 335
- PHP LSR Configuration 336
- # mpls show policy all 339
- Configuring an Explicit Path 340
- Configuring the LSP 341
- Adaptive LSP 343
- Bandwidth 343
- CoS Value 343
- Hop Limit 343
- LSP Metric 343
- Disabling CSPF 344
- Disabling TTL Decrementing 344
- Preference 344
- Connection Retries 344
- Policies 345
- ! Configure interfaces 359
- ! Configure OSPF 359
- DHCP Configuration 365
- 17.6 CONFIGURING L2 TUNNELS 368
- Egress LSR Configuration 370
- ! Create L2 static path TO-R1 372
- ! Start MPLS on this router 372
- Virtual Circuit Signaling 373
- Tunnel LSP Signaling 373
- FEC-Label Bindings 374
- ! If tunnel LSP uses RSVP: 379
- ! If tunnel LSP uses LDP: 379
- 17.7 TRAFFIC ENGINEERING 410
- ! Configure MPLS 419
- ! Enable and start RSVP 419
- ! Configure VLANs 419
- 17.7.3 IGP Shortcuts 427
- IS-IS IGP Shortcuts Example 428
- Advertising IGP Shortcuts 430
- 18.1 PREFERENCE 431
- Import-Source 432
- 18.1.2 Export Policies 433
- Export-Destination 434
- Export-Source 434
- Route-Filter 434
- Aggregate-Destination 436
- Aggregate-Source 436
- Authentication Methods 437
- protocol 448
- Figure 18-1 Exporting to RIP 449
- Figure 18-2 Exporting to OSPF 452
- 19 MULTICAST ROUTING 465
- CONFIGURATION 465
- 19.3 CONFIGURING IGMP 466
- 19.4 CONFIGURING DVMRP 468
- 19.6 CONFIGURATION EXAMPLE 471
- Setting the IP Policy Action 475
- Verifying Next-Hop Gateways 476
- 20.3 MONITORING IP POLICIES 483
- 21 NETWORK ADDRESS 487
- TRANSLATION CONFIGURATION 487
- 21.1.2 Setting NAT Rules 488
- 21.4 NAT AND DNS 489
- 21.5 NAT AND ICMP PACKETS 490
- 21.6 NAT AND FTP 490
- 21.7 MONITORING NAT 491
- 21.8 CONFIGURATION EXAMPLES 491
- Using Static NAT 492
- 21.8.2 Dynamic Configuration 493
- Using Dynamic NAT 494
- 21.8.4 Dynamic NAT with DNS 495
- Using Dynamic NAT with DNS 496
- 22 WEB HOSTING CONFIGURATION 499
- Specifying a Protocol 500
- 22.1.6 Setting Server Status 505
- 22.1.7 Load Balancing and FTP 506
- VSRP Example 507
- “OK” read-till-index 25 510
- Virtual IP Address Ranges 511
- Load Balancing with NAT 514
- 22.2 WEB CACHING 515
- Creating the Cache Group 516
- 22.2.2 Configuration Example 517
- Proxy Server Redundancy 518
- Verifying Servers 519
- 22.2.4 Monitoring Web-Caching 520
- 23 IPX ROUTING CONFIGURATION 521
- 23.5 CONFIGURING IPX ROUTING 525
- 23.7 CONFIGURATION EXAMPLES 528
- Adds a RIP access list 529
- Adds a SAP access list 529
- Adds a GNS access list 529
- 24 ACCESS CONTROL LIST 531
- 24.1.3 Implicit Deny Rule 534
- 24.2.1 Editing ACLs Offline 536
- 24.3 USING ACLS 538
- 24.3.4 Using ACLs as Profiles 540
- 24.4 ENABLING ACL LOGGING 544
- 24.5 MONITORING ACLS 545
- 25 SECURITY CONFIGURATION 547
- Monitoring RADIUS 548
- 25.1.2 Configuring TACACS 549
- 25.1.3 Configuring TACACS+ 549
- Monitoring TACACS+ 550
- 25.1.4 Configuring Passwords 551
- 25.1.5 Configuring SSH 551
- 25.2 LAYER-2 SECURITY FILTERS 552
- Example 1: Address Filters 556
- Static Entries Example 556
- Port-to-Address Lock Examples 557
- Example 2 : Secure Ports 557
- 25.4.6 Notes 561
- 26 QOS CONFIGURATION 563
- SPECIFICATION 564
- 26.3 RS QUEUING POLICIES 565
- LAYER-4 FLOWS 568
- Setting an IPX QoS Policy 569
- 26.8 TOS REWRITE 572
- 26.9 MONITORING QOS 574
- 26.10 LIMITING TRAFFIC RATE 575
- 26.10.1 Rate Limiting Modes 576
- 26.10.4 Port Rate Limiting 577
- Per-Flow Rate Limiting 580
- Flow-Aggregate Rate Limiting 580
- Aggregate Rate Limiting 581
- 27 PERFORMANCE MONITORING 583
- 28 RMON CONFIGURATION 587
- 28.1.2 RMON Groups 588
- Lite RMON Groups 589
- Standard RMON Groups 589
- 28.1.3 Control Tables 590
- 28.2 USING RMON 591
- 28.3 CONFIGURING RMON GROUPS 592
- <number> 593
- 28.4.1 RMON CLI Filters 596
- Creating RMON CLI Filters 597
- Using RMON CLI Filters 597
- 28.5 TROUBLESHOOTING RMON 598
- RS platform Maximum memory 600
- RS 32000 96 MB 600
- RS 8600 48 MB 600
- RS 8000 24 MB 600
- 29 LFAP CONFIGURATION GUIDE 601
- 30 WAN CONFIGURATION 605
- Static Addresses 606
- Mapped Addresses 607
- Dynamic Addresses 607
- Average Packet Size 608
- Nature of the Data 608
- 30.2.5 Packet Encryption 609
- 30.2.6 WAN Quality of Service 609
- Source Filtering and ACLs 610
- Weighted-Fair Queueing 610
- 30.3 FRAME RELAY OVERVIEW 611
- FOR THE RS 612
- 30.9 MONITORING PPP WAN PORTS 617
- 30.10 PPP PORT CONFIGURATION 618
- 30.13 WAN RATE SHAPING 621
- Rate Shaping by Best Effort 626
- Performing Rate Limiting 627
- Non-Rate Shaped Flows 627
- Router Connections on Subnet 630
- Router R1 Configuration File 631
- Router R2 Configuration File 631
- Router R3 Configuration File 632
- Router R4 Configuration File 632
- Router R5 Configuration File 633
- Router R6 Configuration File 633
- OVERVIEW 634
- TEST PORT 636
- T1, E1 AND T3 644
- Metropolitan Sevice Provider 645
- Hardware Requirements 648
- ISP RS 32000 Configuration 650
- RS 8600 Configuration (USA) 681
- T3 AND E3 687
- T3 refers to Channelized T3 688
- ISP RS 8000 Configuration 689
- 31 SERVICE CONFIGURATION 705
- 31.2 CREATING A SERVICE 707
- 31.3 APPLYING A SERVICE 710
- 31.4 SHOWING A SERVICE 712
- 31.4.2 Show All Command 713
- 31.5 PORT-LEVEL RATE LIMITING 714
- Customers 716
- Subnetwork 718
- 122.132.0.0/16 718
- 256 Kbps 718
Powiązane produkty i podręczniki dla Networking Riverstone Networks RS 8000
(120 strony)Dell PowerConnect W-AirWave 7.6 manuels
Manuels d'utilisation et guides de l'utilisateur pour Contrôleurs RAID Dell PowerConnect W-AirWave 7.6.
Nous fournissons des manuels en pdf 1 Dell PowerConnect W-AirWave 7.6 à télécharger gratuitement par type de document : Manuel de l'utilisateur
Komentarze do niniejszej Instrukcji