Chapter 1
Overview
10
P334T
-ML User’s Guide
Policy — Access Control
The P334T-ML supports Access Control policy. The P334T-ML uses policy lists
containing both Access Control rules and QoS rules. The policy lists are ordered by
rule indexing. Access Control rules define how the P334T-ML should handle routed
packets. There are three possible ways to handle such packets:
•
Forward the packet (Permit operation)
•
Discard the packet (Deny operation)
•
Discard the packet and notify the management station (Deny and Notify)
The P334T-ML can enforce Access Control policy on each routed packet, according
to the following criteria:
•
Matching the packet's source or destination IP address to the configured Access
Control policy.
•
Determine if the packet source or destination TCP/UDP port number falls
within a pre-defined range.
•
Using the ACK bit of the TCP header.
The P334T-ML access control rules are set-up using the Command Line Interface
and the Avaya MultiService Network Manager central policy management
application.
DHCP/BOOTP Relay
The P334T-ML supports the DHCP/BOOTP Relay Agent function. This is an
application that accepts DHCP/BOOTP requests that are broadcast on one VLAN
and sends them to a DHCP/BOOTP server that connects to another VLAN or a
server that may be located across one or more routers that would otherwise not get
the broadcast request. The relay agent handles the DHCP/BOOTP replies as well,
transmitting them to the client directly or as broadcast, according to a flag in the
reply message. Note that the same DHCP/BOOTP relay agent serves both the
BOOTP and DHCP protocols.
When there is more than one IP interface on a VLAN, the P334T-ML chooses one of
the IP addresses on this VLAN when relaying the DHCP/BOOTP request. The
DHCP/BOOTP server then uses this address to decide from which subnet the
address should be allocated.
When the DHCP/BOOTP server is configured to allocate addresses only from a
single subnet among the different subnets defined on the VLAN, you may need to
configure the P334T-ML with the relay address on that subnet so that the DHCP/
BOOTP server can accept the request.
DHCP/BOOTP Relay in P334T-ML is configurable per VLAN and allows for two
DHCP/BOOTP servers to be specified. In this case, it duplicates each request, and
sends it to both servers. This provides redundancy and prevents the failure of a
single server from blocking hosts from loading.
DHCP/BOOTP Relay in P334T-ML can be enabled or disabled.
Summary of Contents for P332G-ML
Page 1: ...Avaya User s Guide AVAYA P334T ML STACKABLE SWITCH SOFTWARE VERSION 3 11 June 2002 ...
Page 2: ......
Page 16: ...List of Figures xiv P332GT ML User s Guide ...
Page 18: ...List of Tables xvi P332GT ML User s Guide ...
Page 46: ...Chapter 3 Applications 28 P334T ML User s Guide ...
Page 64: ...Chapter 4 Installation and Setup 46 P334T ML User s Guide ...
Page 72: ...Chapter 5 CLI Architecture Access Conventions 54 P334T ML User s Guide ...
Page 131: ...Chapter 6 CLI Layer 2 Avaya P334T ML User s Guidee 113 Port 2 1 set to full duplex ...
Page 166: ...Chapter 6 CLI Layer 2 148 Avaya P334T ML User s Guide ...
Page 244: ...Appendix B Specifications 226 P334T ML User s Guide ...
Page 248: ...Avaya P334T ML User s Guide 230 ...