Configuring a “null” route, Acl deny logging – Brocade MLX Series and NetIron Family (Supporting Multi-Service IronWare R05.6.xx) User Manual
Page 11
![background image](/manuals/361688/11/background.png)
Brocade MLX Series and NetIron Family Documentation Updates
3
53-1003301-07
Configuring a “null” route
1
Configuring a “null” route
The following section is an update to the Configuring IP Chapter in the Multi-Service Ironware
Switching Configuration Guide.
The feature support table is updated for the “Dropping Traffic Sent to the Null0 Interface in
Hardware” feature.
The following note is added in the “Dropping traffic sent to the null0 interface In hardware” section.
NOTE
The ip hw-drop-on-def-route command is not supported on the Brocade NetIron CES and Brocade
NetIron CER devices. You can drop traffic sent to the default IP route address in hardware without
the ip hw-drop-on-def-route command.
ACL deny logging
The following section is an update to the Configuring an IPv6 Access Control List Chapter in the
Multi-Service Ironware Security Configuration Guide.
ACL deny logging is supported on the Brocade NetIron CES and Brocade NetIron CER devices but
not in conjunction with acl accounting, hence updating this section by removing the bullet point
“ACL deny logging is not supported”.
Unsupported features for Brocade NetIron CES and Brocade NetIron
CER devices
The following features are not supported on the Brocade NetIron CES and Brocade NetIron CER
devices:
•
The acl-outbound exclude-switched-traffic command to exclude switched traffic from outbound
ACL filtering is not supported.
•
The acl-frag-conservative command to change the operation of ACLs on fragmented packets is
not supported.
•
The suppress-rpf-drop command to suppress RPF packet drops for a specific set of packets
using inbound ACLs is not supported.
•
For all NetIron devices, if a port has an IPv4 or IPv6 ACL applied, you must remove the ACL
bindings before adding that port to a VLAN that has a VE interface.
TABLE 1
Feature support table
Features
supported
Brocade
NetIron XMR
Brocade
MLX series
Brocade
NetIron CES
2000 Series
BASE
package
Brocade
NetIron CES
2000 Series
ME_PREM
package
Brocade
NetIron CES
2000 Series
L3_PREM
package
Brocade
NetIron CER
2000 Series
Base
package
Brocade
NetIron CER
2000 Series
Advanced
Services
package
Dropping Traffic
Sent to the
Null0 Interface
in Hardware
Yes
Yes
Yes
Yes
Yes
Yes
Yes