Dell PowerEdge VRTX - Manual (Page 225)

225
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\Dell Plasma\User
Guide\Plasma_UGSwitching_NetworkSecurity.fm
D E L L CO N F I D E N T I A L – P R E L I MI N A RY 4/ 1 8 /1 3 - F O R PR O O F O N LY
Configuring Proprietary Protocol Filtering Using CLI Commands
The following table summarizes the CLI commands for setting fields in the
Proprietary Protocol Filtering pages.
Only one of the following CLI commands can be active on a port at the same
time. To add other protocol filters, the command must be negated and then
run again with all the required protocol names.
.
The following is an example of some of the CLI commands:
Time Range
Time ranges can be defined and associated with commands, such as QoS
ACL, so that it is applied only during that time range.
There are two types of time ranges:
• Absolute —This type of time range begins on a specific date or
immediately and ends on a specific date or extends infinitely. It is created
in the Time Range pages. A recurring element can be added to it.
• Recurring — This is a time range element that is added to an absolute
range, and begins and ends on a recurring basis. It is defined in the Time
Range Recurrence pages.
If a time range includes both absolute and recurring ranges, the ACL is
activated only if both absolute start time and the recurring time range have
been reached. The ACL is deactivated when either of the time ranges is
reached.
blockall 0100.0ccc.ccc0 - 0100.0ccc.cccf -
Table 7-10. Proprietary Protocol Filtering CLI Commands
CLI Command Description
ervice-acl input acl-name1 [acl-
name2] default-action [deny-any
| permit-any]
no service-acl input
Discards packets that are classified to
specific protocols.
Use the no form of those commands
to disable discarding of the packets.
console (Config-if)# service-acl input blockcdp blockvtp
Table 7-9. Protocol Filtering (Continued)