Cisco 7609 Spécifications Page 332
- Page / 572
- Table des matières
- DEPANNAGE
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
23-10
Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E
78-14064-04
Chapter 23 Configuring Network Security
Configuring VLAN ACLs
Routed Packets
Figure 23-2 shows how ACLs are applied on routed and Layer 3-switched packets. For routed or
Layer 3-switched packets, the ACLs are applied in the following order:
1. VACL for input VLAN
2. Input Cisco IOS ACL
3. Output Cisco IOS ACL
4. VACL for output VLAN
Figure 23-2 Applying VACLs on Routed Packets
Catalyst 6500 series switches
with MSFC
Host B
(VLAN 20)
Host A
(VLAN 10)
26964
Bridged
Bridged
VACL
VACL
Input IOS ACL
Output IOS ACL
Routed
MSFC
- Text Part Number: 78-14064-04 1
- CONTENTS 3
- 6 Configuring Interfaces 6-1 5
- 8 Configuring VTP 8-1 6
- 9 Configuring VLANs 9-1 6
- Contents 10
- 78-14064-04 10
- 22 Configuring RGMP 22-1 12
- 30 Configuring CDP 30-1 15
- 31 Configuring UDLD 31-1 15
- 32 Configuring PFC QoS 32-1 15
- 33 Configuring NDE 33-1 16
- A Acronyms A-1 19
- Audience 21
- Organization 21
- Related Documentation 23
- Conventions 24
- Obtaining Documentation 25
- Documentation Feedback 26
- TAC Case Priority Definitions 27
- Product Overview 29
- Command Purpose 31
- Command-Line Interfaces 33
- Table 2-1 Keyboard Shortcuts 35
- Cisco IOS Command Modes 36
- First Time 39
- Setup Overview 40
- Configuring Interfaces 46
- Using Configuration Mode 48
- Reviewing the Configuration 49
- Configuring a Default Gateway 50
- Configuring a Static Route 50
- Configuring a BOOTP Server 52
- Encrypting Passwords 55
- Exiting a Privilege Level 57
- Understanding the ROM Monitor 58
- Modifying the Boot Field 61
- Understanding Flash Memory 62
- BOOTLDR Environment Variable 63
- Redundancy 67
- main-cpu 69
- Configuring RPR and RPR+ 73
- Supervisor Engine Redundancy 73
- RPR Operation 74
- RPR+ Operation 74
- Using the Interface Command 84
- Jumbo Frame Support Overview 93
- Ethernet Ports 94
- VLAN Interfaces 95
- Configuring MTU Sizes 95
- Configuring the MTU Size 95
- Monitoring Interface Status 99
- Resetting an Interface 101
- Understanding VLAN Trunks 104
- Trunking Overview 105
- Layer 2 LAN Port Modes 106
- Restrictions 108
- Guidelines 108
- Configuring the Default VLAN 112
- Configuring VTP 121
- Understanding the VTP Domain 122
- Understanding VTP Modes 122
- Understanding VTP Version 2 123
- Understanding VTP Pruning 123
- Understanding How VTP Works 124
- VTP Default Configuration 125
- Enabling VTP Pruning 127
- Enabling VTP Version 2 127
- Configuring the VTP Mode 128
- Displaying VTP Statistics 130
- Configuring VLANs 131
- VLAN Ranges 132
- Configurable VLAN Parameters 133
- Token Ring TrCRF VLANs 134
- Figure 9-3 Distributed TrCRF 135
- VLAN Default Configuration 136
- Configuring Private VLANs 145
- Cisco IP Phone Support 155
- Cisco IP Phone Voice Traffic 156
- Cisco IP Phone Data Traffic 157
- Fast Ethernet port 5/4: 166
- Configuring EtherChannels 171
- EtherChannel Feature Overview 172
- Table 13-1 EtherChannel Modes 173
- Understanding Load Balancing 175
- Configuring Channel Groups 178
- Protocol Tunneling 183
- Configuring 802.1Q Tunneling 187
- Service provider 189
- Understanding How STP Works 194
- Understanding the Bridge ID 195
- Election of the Root Bridge 196
- STP Protocol Timers 197
- STP Port States 198
- Blocking State 200
- Listening State 201
- Learning State 202
- Forwarding State 203
- STP and IEEE 802.1Q Trunks 204
- IEEE 802.1w RSTP Overview 205
- RSTP Port Roles 205
- RSTP Port States 206
- Rapid-PVST 206
- IEEE 802.1s MST Overview 207
- MST-to-PVST Interoperability 208
- Common Spanning Tree 210
- MST Instances 210
- MST Configuration Parameters 210
- MST Regions 211
- Message Age and Hop Count 212
- Default STP Configuration 213
- Configuring STP 214
- Enabling STP 215
- Configuring the Root Bridge 217
- Configuring STP Port Priority 219
- Configuring STP Port Cost 221
- Configuring the Hello Time 224
- Enabling Rapid-PVST 225
- Configuring IEEE 802.1s MST 226
- Displaying MST Configurations 228
- Restarting Protocol Migration 232
- Enabling PortFast 242
- Enabling BPDU Guard 245
- Enabling UplinkFast 246
- Enabling BackboneFast 247
- Enabling EtherChannel Guard 248
- Enabling Root Guard 248
- Enabling Loop Guard 249
- Supervisor Engine 2 251
- Subnet 3/Marketing 253
- Non-RPF Traffic Processing 261
- Unsupported Features 265
- Using Debug Commands 274
- Supervisor Engine 1 277
- IP MLS Flows 278
- IP MLS Overview 278
- Layer 3 MLS Cache 279
- Flow Masks 279
- IP MLS Operation 281
- Default IP MLS Configuration 282
- Configuring IP MLS 282
- Displaying IP MLS Information 285
- Clearing IP MLS Cache Entries 287
- Troubleshooting IP MLS 290
- IPX MLS Overview 292
- IPX MLS Flows 292
- IPX MLS Operation 294
- Default IPX MLS Configuration 295
- Configuring IPX MLS 296
- Troubleshooting IPX MLS 304
- Configuring IGMP Snooping 305
- IGMP Snooping Overview 306
- Joining a Multicast Group 306
- Leaving a Multicast Group 308
- Fast-Leave Processing 309
- Guidelines and Restrictions 310
- Enabling IGMP Snooping 313
- Configuring a Host Statically 316
- Configuring RGMP 319
- Default RGMP Configuration 320
- Configuring Network Security 323
- Configuring VLAN ACLs 330
- Bridged Packets 331
- Routed Packets 332
- Configuring VACLs 333
- VACL Configuration Overview 334
- Defining a VLAN Access Map 334
- Applying a VLAN Access Map 336
- Configuring a Capture Port 338
- Configuring VACL Logging 339
- Configuring TCP Intercept 340
- Configuring Unicast RPF 341
- Enabling Self-Pinging 341
- DoS Protection Overview 347
- Configuring DoS Protection 348
- QoS ACLs 350
- APR Throttling 351
- Device Roles 356
- Figure 25-2 Message Exchange 357
- Supported Topologies 358
- Changing the Quiet Period 365
- EAP-Request Frames 367
- Time for Layer 4 Packets 367
- Enabling Multiple Hosts 368
- Displaying 802.1X Status 369
- Configuring Port Security 371
- Configuring CDP 389
- Enabling CDP Globally 390
- Enabling CDP on a Port 390
- Configuring UDLD 393
- UDLD Aggressive Mode 394
- Default UDLD Configuration 395
- Configuring PFC QoS 399
- Hardware Supported by PFC QoS 400
- QoS Terminology 401
- 1. MSb = most significant bit 403
- PFC QoS Feature Flowcharts 404
- PFC QoS Feature Summary 409
- Ingress LAN Port Features 410
- Receive Queues 411
- Scheduling 412
- Congestion Avoidance 412
- PFC Marking and Policing 414
- Internal DSCP Values 415
- Internal DSCP Sources 415
- Egress DSCP and CoS Sources 415
- Policy Maps 416
- Policers 417
- LAN Egress Port Features 419
- 2q2t Ports 421
- 1p2q2t Ports 421
- 1p3q1t Ports 421
- 1p2q1t Ports 422
- PFC QoS Default Configuration 423
- Guidelines: 429
- Enabling Queueing-Only Mode 432
- Configuring a PFC QoS Policy 435
- Creating a Class Map 438
- Configuring a Policy Map 440
- Creating a Policy Map 440
- Configuring DSCP Value Maps 464
- Configuring NDE 477
- NDE Overview 478
- NDE from the MSFC 478
- NDE from the PFC 478
- NDE Versions 479
- Understanding How NDE Works 481
- MLS Cache Entries 482
- Sampled NetFlow 482
- Default NDE Configuration 483
- Configuring Sampled NetFlow 487
- Configuring NDE on the MSFC 489
- Configuring NDE Flow Filters 491
- Clearing an NDE Flow Filter 493
- Local SPAN and RSPAN Overview 495
- Local SPAN Overview 496
- Local SPAN and RSPAN Sessions 497
- Monitored Traffic 498
- SPAN Sources 498
- Configuring RSPAN VLANs 502
- Verifying the Configuration 506
- Configuration Examples 506
- Understanding WCCP 509
- WCCP Overview 510
- Hardware Acceleration 510
- WCCPv2 Features 513
- Restrictions for WCCPv2 514
- Configuring WCCP 515
- WCCP Configuration Examples 519
- Using Access Lists Example 521
- Switch Fabric Module Overview 529
- Switch Fabric Module Slots 530
- Switch Fabric Redundancy 530
- Switching Modes 530
- Configuring an LCD Message 533
- Displaying the Fabric Status 535
- Displaying Fabric Errors 535
- Monitoring 537
- Acronyms 543
- Appendix A Acronyms 544
- Numerics 551
Produits connexes et manuels pour Mise en réseau Cisco 7609
(6 pages)
(44 pages)
(98 pages)
(48 pages)© 2020, manymanuals.fr. Tous droits réservés | 0.059 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels