Send documentation comments to mdsfeedback-doc@cisco.com
53-6
Cisco MDS 9000 Family Fabric Manager Configuration Guide
OL-17256-03, Cisco MDS NX-OS Release 4.x
Chapter 53 Configuring IPv4 for Gigabit Ethernet Interfaces
IPv4-ACLs
IPv4-ACLs
This section describes the guidelines for IPv4 access control lists (IPv4-ACLs) and how to apply them
to Gigabit Ethernet interfaces.
Note For information on creating IPv4-ACLs, see Chapter 42, “Configuring IPv4 and IPv6 Access Control
Lists.”
Gigabit Ethernet IPv4-ACL Guidelines
Follow these guidelines when configuring IPv4-ACLs for Gigabit Ethernet interfaces:
• Only use Transmission Control Protocol (TCP) or Internet Control Message Protocol (ICMP).
Note Other protocols such as User Datagram Protocol (UDP) and HTTP are not supported in
Gigabit Ethernet interfaces. Applying an ACL that contains rules for these protocols to a
Gigabit Ethernet interface is allowed but those rules have no effect.
• Apply IPv4-ACLs to the interface before you enable an interface. This ensures that the filters are in
place before traffic starts flowing.
• Be aware of the following conditions:
–
If you use the log-deny option, a maximum of 50 messages are logged per second.
–
The established option is ignored when you apply IPv4-ACLs containing this option to Gigabit
Ethernet interfaces.
–
If an IPv4-ACL rule applies to a pre-existing TCP connection, that rule is ignored. For example
if there is an existing TCP connection between A and B and an IPv4-ACL which specifies
dropping all packets whose source is A and destination is B is subsequently applied, it will have
no effect.
Tip If IPv4-ACLs are already configured in a Gigabit Ethernet interface, you cannot add this interface to an
Ethernet PortChannel group. “See Configuring IPv4 for Gigabit Ethernet Interfaces, page 53-1 for
information on configuring IPv4-ACLs.
Default Settings
Table 53-2 lists the default settings for IPv4 parameters.
Table 53-2 Default IPv4 Parameters
Parameters Default
IPv4 MTU frame size 1500 bytes for all Ethernet ports.
Autonegotiation Enabled.
Promiscuous mode Disabled.
To Next Page
Loading...
