
13-18
User Guide for the Avaya P580 and P882 Multiservice Switches, v6.0
Chapter 13
CLI Command
To set the interval for ACL logging, use the following CLI command:
(configure)#
ip acl-logging logging-interval <time-in-seconds>
Optimizing Switch Performance
* Note: This section provides a detailed discussion of the architecture
and functionality of the Avaya Multiservice switch with
respect to ACLs. This material goes well beyond standard
configuration issues by addressing system performance,
memory management and optimization.
Purpose
The purpose of this section is to explain the configuration options when
using Access Lists. Deploying an Access List affects the use of hardware
and software resources and may impact system performance. An Access
Control List (ACL), also referred to as an Access List, is a tool for
associating rules (permit, deny, prioritize for Quality of Service (QoS)) with
identified IP traffic through the switch. This section will show how to
monitor performance and adjust configurations to optimize performance.
Terminology
The following terms are used extensively in this section:
■
5-tuple: The five elements that fully describe the criteria of the ACL
rule: Source IP/ Mask, Destination IP/Mask, Protocol, Source Port,
Destination Port. The masks allow the user to specify a narrow or
wide range of matches. All elements are optional, but the Ports are
only valid if TCP or UDP is the selected protocol and can be
expressed as a single port or range of ports. The protocol ID for TCP
and UDP is 6 and 17 respectively.
■
Access List/Access Control List (ACL): an ordered list of ACL
Rules.
■
ACL Rule: An element of an ACL that identifies traffic based upon
a 5-tuple (condition), and specifies a queue (0-7), permit, or deny
action for packets matching the condition.
■
CPU: The general processor for the P580 and P882 that resides on
the Supervisor module. The CPU determines whether to forward or
filter packets. It identifies Flows by resolving IP-to-MAC
addressing and matching ACL Rules. It updates the F-chip’s
forwarding cache for future Fast Path’ing of packets that match this
Flow. The process of examining Flows and updating all of the F-
chips’ forwarding caches is called Slow Path.
■
DA: Destination IP Address.
Содержание Cajun P580
Страница 26: ...xxvi User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Preface...
Страница 50: ...1 24 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 1...
Страница 158: ...5 24 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 5...
Страница 308: ...10 18 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 10...
Страница 323: ...Document No 650 100 700 Issue 1 12 7 Configuring IP Routing Figure 12 3 Add IP Interface Web Screen...
Страница 419: ...Document No 650 100 700 Issue 1 13 9 Configuring Access Lists Figure 13 3 IP Extended Access Rule Creation Dialog Box...
Страница 508: ...16 26 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 16...
Страница 530: ...18 14 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 18...
Страница 622: ...21 22 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 21...
Страница 652: ...23 20 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 23...
Страница 660: ...24 8 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 24...
Страница 714: ...25 54 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 25...
Страница 728: ...Appendix B B 4 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0...