TABLE 15 Applying a firewall rule set to a VRRP interface (continued)
Step
Command
}
mtu 1500
vrrp {
vrrp-group 15 {
advertise-interval 1
preempt true
sync-group test
virtual-address 172.16.1.25
}
}
Using VRRP with a zone-based firewall
When a physical interface or virtual interface has a VRRP interface defined, all incoming traffic arrives through the VRRP interface. Zone-
based firewalls drop all traffic in and out unless explicitly allowed. Therefore, if you are using VRRP interfaces with a zone-based firewall,
you must make sure you include the VRRP interfaces in your zone.
To use VRRP interface in a zone you must attach the physical interface on which VRRP is enabled. The configuration is the same as
zone configuration on a physical interface, the only difference is that VRRP is running on this interface.
Enabling control plane policing
This section provides configuration examples on how to enable or disable CPP on Brocade 5600 vRouter data plane and loopback
interfaces.
To enable or disable CPP on a data plane interface, perform the following steps in configuration mode.
TABLE 16 Enabling and disabling CPP on a data plane interface
Step
Command
Enable CPP on a data plane interface by applying a firewall
instance or rule set with the local keyword.
vyatta@R1# set interfaces dataplane dp0s4 firewall local
cpp_group
Commit the configuration.
vyatta@R1# commit
Show the CPP configuration.
vyatta@R1# show interfaces dataplane dp0s4 firewall local
cpp_group
interfaces {
dataplane dp0s4 {
firewall {
local cpp_group
}
}
}
Disable CPP by deleting a data plane interface that is
applied with a firewall instance or rule set with local keyword.
vyatta@R1# delete interfaces dataplane dp0s4 firewall local
cpp_group
Commit the configuration.
vyatta@R1# commit
To enable or disable CPP on the lo loopback interface, perform the following steps in configuration mode.
Configuration Examples
Brocade 5600 vRouter Firewall Configuration Guide
36
53-1004253-01
Summary of Contents for 5600 vRouter
Page 6: ...Brocade 5600 vRouter Firewall Configuration Guide 6 53 1004253 01 ...
Page 10: ...Preface Brocade 5600 vRouter Firewall Configuration Guide 10 53 1004253 01 ...
Page 12: ...About This Guide Brocade 5600 vRouter Firewall Configuration Guide 12 53 1004253 01 ...
Page 20: ...Firewall Overview Brocade 5600 vRouter Firewall Configuration Guide 20 53 1004253 01 ...
Page 100: ...ICMPv6 Types Brocade 5600 vRouter Firewall Configuration Guide 100 53 1004253 01 ...
