Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) - Manual (Page 7)

Multi-Service IronWare Security Configuration Guide vii
53-1003035-02
IP broadcast ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .140
Configuration considerations for IP broadcast ACL . . . . . . . . .140
Configuring IP broadcast ACL and establishing the sequence of IP
broadcast ACL commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
Configuration example for IP broadcast ACL . . . . . . . . . . . . . .142
Displaying accounting information for IP broadcast ACL. . . . .142
Clearing accounting information for IP broadcast ACL . . . . . .144
IP broadcast ACL CAM. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144
Considerations for implementing IP broadcast ACL . . . . . . . .145
Specifying the maximum CAM size for IP broadcast ACL . . . .145
Rebinding of IP broadcast ACL CAM entries. . . . . . . . . . . . . . .146
IP receive ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .146
Configuration guidelines for IP receive ACLs . . . . . . . . . . . . . . 147
Configuring rACLs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
Displaying accounting information for rACL . . . . . . . . . . . . . . .151
ACL CAM sharing for inbound ACLs for IPv4 ACLs
(Brocade NetIron XMR and Brocade MLX series devices only) . . .152
Matching on TCP header flags for IPv4 ACLs . . . . . . . . . . . . . . . . .153
ACL deny logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .153
ACL accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .157
Enabling and disabling ACL accounting on Brocade NetIron XMR and
Brocade MLX series devices . . . . . . . . . . . . . . . . . . . . . . . . . . .157
ACL accounting on Brocade NetIron CES and Brocade NetIron CER
devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .158
Displaying accounting statistics for all ACLs . . . . . . . . . . . . . .159
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .161
Chapter 4 Configuring an IPv6 Access Control List
Configuration considerations for dual inbound ACLS on Brocade
NetIron CES and Brocade NetIron CER devices. . . . . . . . . . . .173
Configuration considerations for IPv6 ACL and multicast traffic for
2X100GE modules installed on NetIron MLX and NetIron XMR
devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173
Configuration considerations for IPv6 outbound ACLs
on VPLS, VLL, and VLL-local endpoints. . . . . . . . . . . . . . . . . . .173
ACL editing and sequence numbers. . . . . . . . . . . . . . . . . . . . . 174
. . . . . . . . . . . . . . . . . . .Using IPv6 ACLs as input to other features176
Configuring an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176
Example configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177
Default and implicit IPv6 ACL action. . . . . . . . . . . . . . . . . . . . .179
Re-sequencing an IPv6 ACL table . . . . . . . . . . . . . . . . . . . . . . .180
Deleting an IPv6 ACL entry . . . . . . . . . . . . . . . . . . . . . . . . . . . .181
ACL syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .181
Filtering packets based on DSCP values . . . . . . . . . . . . . . . . .195
Marking the DSCP value in a packet . . . . . . . . . . . . . . . . . . . .195
Filtering packets based on routing header type . . . . . . . . . . .195