Dell BigIron RX Series, Configuration Manual

Page: 605 / 1458

BigIron RX Series Configuration Guide 529
53-1002253-01
Configuring numbered and named ACLs
21
Configuring ACL-based mirroring for ACLs bound to virtual
interfaces
For configurations that have an ACL bound to a virtual interface, you must configure the
acl-mirror-port command on a port for each PPCR that is a member of the virtual interface. For
example, in the following configuration ports 4/1 and 4/2 share the same PPCR while port 4/3
uses another PPCR.
BigIron RX(config)# vlan 10
BigIron RX(config-vlan-10)# tagged ethernet 4/1 to 4/3
BigIron RX(config-vlan-10)# router-interface ve 10
BigIron RX(config)# interface ethernet 4/1
BigIron RX(config-if-e10000-4/1)# acl-mirror-port ethernet 5/1
BigIron RX(config)# interface ve 10
BigIron RX(config-vif-10)# ip address 10.10.10.254/24
BigIron RX(config-vif-10)# ip access-group 102 in
BigIron RX(config)# access-list 101 permit ip any any mirror
In this configuration, the acl-mirror-port command is configured on port 4/1 which is a member of
ve 10. Because of this, ACL-based mirroring will apply to VLAN 10 traffic that arrives on ports 4/1
and 4/2. It will not apply to VLAN 10 traffic that arrives on port 4/3 because that port uses a
different PPCR than ports 4/1 and 4/2. To make the configuration apply ACL-based mirroring to
VLAN 10 traffic arriving on port 4/3, you must add the following command to the configuration.
BigIron RX(config)# interface ethernet 4/3
BigIron RX(config-if-e10000-4/3)# acl-mirror-port ethernet 5/1
Configuring numbered and named ACLs
When you configure ACLs, you can refer to the ACL by a numeric ID or by an alphanumeric name
(except for super ACLs, which must be assigned numeric IDs). The commands to configure
numbered ACLs are different from the commands to configure named ACLs.
•
To identify an ACL by a numeric ID, use 1 – 99 for a standard ACL, 100 – 199 for an extended
ACL, and 500 – 599 for a super ACL. This document refers to these ACLs as
numbered ACLs .
•
To identify an ACL by a name, first specify whether the ACL is standard or extended, then
specify the name. This document refers to these ACLs as
named ACLs . Super ACLs must be
configured with numeric IDs only.
You can configure up to 100 standard named or numbered IP ACLs, 100 extended named or
numbered IP ACLs, and 100 numbered super ACLs. Regardless of how many ACLs you configure,
the BigIron RX can support a maximum of 1024 ACL entries, associated with the ACLs in any
combination.
Configuring standard numbered ACLs
This section describes how to configure standard numbered ACLs with numeric IDs.
•
For configuration information on named ACLs, refer to “Configuring standard or extended
named ACLs” on page 539.
•
For configuration information on extended ACLs, refer to “Configuring extended numbered
ACLs” on page 531.