untitled

Size: px

Start display at page:

Download "untitled"

かげたつみやのじょう
4 years ago
Views:

1 UDP... 5 TCP... 6 VLAN IGMP Snooping CREATE ACL DESTROY ACL PURGE ACL RESET ACL COUNTER SETACL SHOW ACL SHOW ACL COUNTER CentreCOM 9424T

2 ASIC Ethernet MAC VLAN 802.1p IP TOS precedence DSCP DiffServ Code Point IP TCP UDP permit deny ACL ACL DESCRIPTION ACTION CLASSIFIERLIST PORTLIST ID ID 2 CentreCOM 9424T 2.11

3 ACL 1: ACL ID CREATE CLASSIFIER 6 2. ACL CREATE ACL CREATE CLASSIFIER=1 IPDADDR= ACL CREATE ACL=1 ACTION=DENY CLASSIFIERLIST=1 PORTLIST=8 CentreCOM 9424T

4 MAC f CREATE CLASSIFIER=1 MACSADDR=00-00-f CREATE ACL=1 ACTION=DENY CLASSIFIERLIST=1 PORTLIST= /24 IP CREATE CLASSIFIER=1 IPSADDR= /32 IPDADDR= /24 CREATE ACL=1 ACTION=DENY CLASSIFIERLIST=1 PORTLIST= telnet CREATE CLASSIFIER=1 IPDADDR= /32 TCPDPORT=23 CREATE ACL=1 ACTION=DENY CLASSIFIERLIST=1 PORTLIST= CREATE CLASSIFIER=1 IPDADDR= /32 CREATE CLASSIFIER=2 IPSADDR= /32 CREATE CLASSIFIER=3 PROTOCOL=ARP CREATE CLASSIFIER=4 CREATE ACL=1 ACTION=PERMIT CLASSIFIERLIST=1 PORTLIST=ALL CREATE ACL=2 ACTION=PERMIT CLASSIFIERLIST=2 PORTLIST=ALL CREATE ACL=3 ACTION=PERMIT CLASSIFIERLIST=3 PORTLIST=ALL CREATE ACL=4 ACTION=DENY CLASSIFIERLIST=4 PORTLIST=ALL ARP CREATE CLASSIFIER=1 PROTOCOL=ARP CREATE CLASSIFIER=2 PROTOCOL=ANY CREATE ACL=1 ACTION=PERMIT CLASSIFIERLIST=1 PORTLIST=ALL CREATE ACL=2 ACTION=DENY CLASSIFIERLIST=2 PORTLIST=ALL ACL SHOW ACL 19 SHOW ACL SHOW CLASSIFIER 13 CLASSIFIER 4 CentreCOM 9424T 2.11

5 SHOW CLASSIFIER SHOW CLASSIFIER=1-3 ACL DESTROY ACL 15 DESTROY ACL=1 ACL ACL DESTROY CLASSIFIER 9 UDP VLAN UDP A VLAN-white(10): VLAN-orange(20): STOP STOP /24 VLAN orange UDP CentreCOM 9424T

6 1 UDP DHCP IP A 1. VLAN CREATE VLAN=white VID=10 CREATE VLAN=orange VID=20 ADD VLAN=white PORT=6 ADD VLAN=orange PORT= VLAN IP ADD IP INT=vlan-white IP= MASK= ADD IP INT=vlan-orange IP= MASK= ADD IP ROUTE= MASK= INT=vlan-white NEXTHOP= UDP IP IPPROTOCOL UDP CREATE CLASSIFIER=1 IPPROTOCOL=UDP ACL 2 3 CREATE ACL=1 ACTION=DENY CLASSIFIERLIST=1 PORTLIST=2,3 TCP TCP Syn Ack VLAN TCP 6 CentreCOM 9424T 2.11

7 A STOP /24 VLAN-white(10): VLAN-orange(20): /24 TCP VLAN orange white white orange A 1. VLAN CREATE VLAN=white VID=10 CREATE VLAN=orange VID=20 ADD VLAN=white PORT=1-12 ADD VLAN=orange PORT= VLAN IP ADD IP INT=vlan-white IP= MASK= ADD IP INT=vlan-orange IP= MASK= IP /24 IP /24 TCP (TCPFLAGS) SYN CREATE CLASSIFIER=1 IPSADDR= /24 IPDADDR= /24 TCPFLAGS=SYN ACL 1 12 CentreCOM 9424T

8 CREATE ACL=1 ACTION=DENY CLASSIFIERLIST=1 PORTLIST=1-12 VLAN 1 VLAN10() 2 VLAN20( ) 3 VLAN30() VLAN10 VLAN20 VLAN30 VLAN20 VLAN30 A 1. VLAN CREATE VLAN=p1 VID=10 CREATE VLAN=p2 VID=20 CREATE VLAN=p3 VID=30 ADD VLAN=p1 PORT=1 ADD VLAN=p2 PORT=2 ADD VLAN=p3 PORT=3 2. VLAN IP ADD IP INT=vlan-p1 IP= MASK= ADD IP INT=vlan-p2 IP= MASK= ADD IP INT=vlan-p3 IP= MASK= IP /24 IP /24 IP /24 IP /24 8 CentreCOM 9424T 2.11

9 CREATE CLASSIFIER=1 IPSADDR= /24 IPDADDR= /24 CREATE CLASSIFIER=2 IPSADDR= /24 IPDADDR= /24 ACL CREATE ACL=1 ACTION=DENY CLASSIFIERLIST=1 PORTLIST=2 CREATE ACL=2 ACTION=DENY CLASSIFIERLIST=2 PORTLIST=3 VLAN10 VLAN20 A( ) A 1. VLAN CREATE VLAN=v10 VID=10 CREATE VLAN=v20 VID=20 ADD VLAN=v10 PORT=1-12 ADD VLAN=v20 PORT= VLAN IP CentreCOM 9424T

10 ADD IP INT=vlan-v10 IP= MASK= ADD IP INT=vlan-v20 IP= MASK= A 2 IP /32 IP /24 IP /24 IP /32 CREATE CLASSIFIER=1 IPSADDR= /32 IPDADDR= /24 CREATE CLASSIFIER=2 IPSADDR= /24 IPDADDR= /32 VLAN 2 IP /24 IP /24 IP /24 IP /24 CREATE CLASSIFIER=3 IPSADDR= /24 IPDADDR= /24 CREATE CLASSIFIER=4 IPSADDR= /24 IPDADDR= /24 ACL CREATE ACL=1 ACTION=PERMIT CLASSIFIERLIST=1 PORTLIST=1-12 CREATE ACL=2 ACTION=PERMIT CLASSIFIERLIST=2 PORTLIST=13-24 CREATE ACL=3 ACTION=DENY CLASSIFIERLIST=3 PORTLIST=1-12 CREATE ACL=4 ACTION=DENY CLASSIFIERLIST=4 PORTLIST=13-24 CPU 10 CentreCOM 9424T 2.11

11 IGMP Snooping IPPROTOCOL IGMP IGMP Snooping CentreCOM 9424T

12 CREATE ACL DESTROY ACL PURGE ACL RESET ACL COUNTER SETACL SHOW ACL SHOW ACL COUNTER CentreCOM 9424T 2.11

13 CREATE ACL CREATE ACL / CREATE ACL= [DESCRIPTION=string] [ACTION={DENY PERMIT}] [CLASSIFIERLIST={rule-list NONE}] [PORTLIST={port-list ALL NONE}] string: 1 31 rule-list: port-list: 1 ACL MAC IP CREATE CLASSIFIER ACL ACL ID DESCRIPTION ACTION PERMIT DENY DENY CLASSIFIERLIST ACL ID NONE PORTLIST ACL NONE ACL CREATE ACL=1 ACTION=DENY CLASSIFIERLIST=1 PORTLIST=8 DESTROY ACL 15 PURGE ACL 16 RESET ACL COUNTER 17 CentreCOM 9424T

14 CREATE ACL SET ACL 18 SHOW ACL 19 SHOW ACL COUNTER CentreCOM 9424T 2.11

15 DESTROY ACL DESTROY ACL / DESTROY ACL={id-list ALL} id-list: ACL ID ACL ACL ID ACL DESTROY ACL=1 CREATE ACL 13 PURGE ACL 16 RESET ACL COUNTER 17 SET ACL 18 SHOW ACL 19 SHOW ACL COUNTER 21 CentreCOM 9424T

16 PURGE ACL PURGE ACL / PURGE ACL ACL ACL PURGE ACL CREATE ACL 13 DESTROY ACL 15 RESET ACL COUNTER 17 SET ACL 18 SHOW ACL 19 SHOW ACL COUNTER CentreCOM 9424T 2.11

17 RESET ACL COUNTER RESET ACL COUNTER / RESET ACL[={id-list ALL}] COUNTER id-list: ACL ID ACL ACL ID ALL ACL CREATE ACL 13 DESTROY ACL 15 PURGE ACL 16 SET ACL 18 SHOW ACL 19 SHOW ACL COUNTER 21 CentreCOM 9424T

18 SET ACL SET ACL / SET ACL= [DESCRIPTION=string] [ACTION={DENY PERMIT}] [CLASSIFIERLIST={rule-list NONE}] [PORTLIST={port-list ALL NONE}] string: 1 31 rule-list: port-list: 1 ACL ACL ID DESCRIPTION ACTION PERMIT DENY CLASSIFIERLIST ACL ID PORTLIST ACL ACL SET ACL=1 CLASSIFIERLIST=2-5 CREATE ACL 13 DESTROY ACL 15 PURGE ACL 16 RESET ACL COUNTER 17 SHOW ACL 19 SHOW ACL COUNTER CentreCOM 9424T 2.11

19 SHOW ACL SHOW ACL / SHOW ACL[={id-list ALL}] id-list: ACL ID ACL ACL ID ALL # show acl ACL ID... 1 Description... Action... Deny Classifier List... 1 Port List... 8 Is Active... Yes ACL ID Description Action Classifier List Port List Is Active ID Permit Deny ID YesNo 2: CREATE ACL 13 DESTROY ACL 15 PURGE ACL 16 CentreCOM 9424T

20 SHOW ACL RESET ACL COUNTER 17 SET ACL 18 SHOW ACL COUNTER CentreCOM 9424T 2.11

21 SHOW ACL COUNTER SHOW ACL COUNTER / SHOW ACL[={id-list ALL}] COUNTER id-list: ACL ID ACL ACL ID ALL # show acl counter ACL Classifier Hit Counter ACL 1 1 Classifier Classifier ACL 2 3 Classifier ACL 3 4 Classifier ACL 4 5 Classifier ACL Classifier Hit Counter ACL ID CREATE ACL ACL id ID CREATE CLASSIFIER Classifier id 3: CREATE ACL 13 DESTROY ACL 15 PURGE ACL 16 RESET ACL COUNTER 17 CentreCOM 9424T

22 SHOW ACL COUNTER SET ACL CentreCOM 9424T 2.11

acl.dvi

acl.dvi ... 2... 2... 2... 3... 3... 4... 4... 5 IGMP Snooping... 5... 6... 6 CREATE ACL...... 7 DESTROY ACL..... 8 PURGE ACL... 9 SETACL... 10 SHOW ACL... 11 CentreCOM 9424T/SP 9408LC/SP 2.3 1 ASIC Ethernet MAC