10 GbE Gateway
(sRB-20210G Module) User Manual
Version 2.0
97
Mellanox Technologies
where:
row
Index number of the rule. Rules are applied according to priority: if
several rules apply to arriving packets, the rules with the lowest index
number will be applied.
You can add up to 1,204 rules.
Source
Source IP address. Enter a value of
any
when you wish to apply the
rule to all packets, regardless of the source IP address.
Source-ip-mask
Source subnet mask. Specifies a range of IP addresses. E.g. if we
want to take into consideration all addresses in the
192.168.2.*
subnet, then we use
255.255.255.0
as the
source-ip-
mask. Enter a
value of
any
when you wish to apply the rule to all packets regardless
of the subnet mask value.
Dest
Destination IP address. Enter a value of any when you wish to apply
the rule to all packets, regardless of the destination IP address.
Note:
The destination IP can be a subnet (for example
192.168.4.0
) and not
just a specific IP address.
Dest-ip-mask
Subnet mask of the destination.
Interface
Interface name on which the rule is to be applied.
Service
Optionally, enter the service name for which the rule is to be applied.
Enter a value of
any
when you wish to apply the rule to all packets,
regardless of the service.
tunneling,
discard
Action taken for packets that match the specified rule.
tunneling
means that the packet will be passed via tunneling.
discard
means the
packet will be dropped.
log [1-15]
These logs are counters to which you associate a rule. A single log
counter can be shared among several TFM rules. Whenever a hit
occurs on a rule, its log counter is incremented. A shared log counter is
incremented whenever one of its associated rules is hit. You can view
the log using the
log show
command in the Statistics menu. For further
details on Logs, refer to
Logs and Statistics
.
The log data include the following:
counter
Counter number. Note that a single counter can
serve more than one rule at a time.
tx total pack
Overall number of transmit packets (from
Infiniband to Ethernet) counted by this counter with
their associated rules.
tx total byte
Overall sum of Transmit bytes that passed due to a
specific counter (from Infiniband to Ethernet).
rx total pack
Same explanation but for Rx (from Ethernet to
Infiniband).
rx total byte
Same explanation but for Rx (from Ethernet to
Infiniband).
