background image

 

4

 

 

Interface-connecting component

It connects the interface of the routing/switching component to 

that of the independent service component, allowing the devices of two manufacturers to be 

interconnected. 

ACFP collaboration 

ACFP collaboration means that the independent service component can send instructions to the 

routing/switching component in order to change its functions. ACFP collaboration is mainly 

implemented through the Simple Network Management Protocol (SNMP). Acting as a network 

management system, the independent service component sends various SNMP commands to the 

routing/switching component, which can then execute the instructions received because it supports 

SNMP agent. In this process, the cooperating MIB is the key to associating the two components with 
each other. 

ACFP management 

ACFP collaboration provides a mechanism that enables the ACFP client to control the traffic on the ACFP 

server by implementing the following functions: 

 

Mirroring and redirecting the traffic on the ACFP server to the ACFP client 

 

Permitting/denying the traffic from the ACFP server 

 

Restricting the rate of the traffic on the ACFP server 

 

Carrying the context ID in a packet to enable the ACFP server and ACFP client to communicate the 
packet context with each other. The detailed procedure is as follows: 

The ACFP server maintains a context table that can be queried with context ID. Each context ID 

corresponds with an ACFP collaboration policy that contains information including inbound interface 

and outbound interface of the packet, and collaboration rules. When the packet received by the ACFP 
server is redirected or mirrored to the ACFP client after matching a collaboration rule, the packet carries 

the context ID of the collaboration policy to which the collaboration rule belongs. When the redirected 

packet is returned from the ACFP client, the packet also carries the context ID. With the context ID, the 

ACFP server knows that the packet is returned after being redirected and then forwards the packet 

normally. 
For the ACFP client to better control traffic, the two-level structure of collaboration policy and 
collaboration rules is set in the collaboration to manage the traffic matching the collaboration rule based 

on the collaboration policy, implementing flexible traffic management. 
To better support the Client/Server collaboration mode and granularly and flexibly set different rules, the 

collaboration content is divided into four parts: ACFP server information, ACFP client information, ACFP 

collaboration policy and ACFP collaboration rules. These four parts of information are saved in the ACFP 

server. 
An ACFP server supports multiple ACFP clients. ACFP client information, ACFP collaboration policy, and 

ACFP collaboration rules are organized in the form of tables. 
ACFP  server  information  is  generated  by  the  ACFP  server  itself.  ACFP  client  information,  ACFP 

collaboration policy, and ACFP collaboration rules are generated on the ACFP client and sent to the 

ACFP server through the collaboration MIB or collaboration protocol. 

Содержание s5800 series

Страница 1: ...H3C S5820X S5800 Switch Series OAA Configuration Guide Hangzhou H3C Technologies Co Ltd http www h3c com Software version Release 1211 Document version 6W100 20110415...

Страница 2: ...re Secware Storware NQA VVG V2 G Vn G PSPT XGbus N Bus TiGem InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co Ltd All other trademarks that may be mentioned in this manual are the...

Страница 3: ...the operating system of the OAP card and configure the ACFP and ACSEI protocols to exchange information between your switch and the OAP card This preface includes Audience Added and modified features...

Страница 4: ...ment combination before the ampersand sign can be entered 1 to n times A line that starts with a pound sign is comments GUI conventions Convention Description Boldface Window names button names field...

Страница 5: ...ances features specifications installation and removal of the pluggable 300W power modules available for the products PSR750 A PSR750 D Power Modules User Manual Describes the appearances features spe...

Страница 6: ...lp you quickly set up and use your device with the minimum configuration S5800 Series Ethernet Switches Installation Manual S5820X Series Ethernet Switches Installation Manual Provides a complete guid...

Страница 7: ...al Documents Provides hardware installation software upgrading and software feature configuration and maintenance documentation Products Solutions Provides information about products and technologies...

Страница 8: ...the ACFP server switch 8 Enabling the ACFP server 8 Enabling the ACFP trap function 8 Displaying and maintaining ACFP 9 Configuring the ACFP client OAP card 9 ACSEI configuration 10 Introduction to AC...

Страница 9: ...way the terminal display interface is switched from the command line interface CLI on the switch to the operating interface of the software system on the OAP card and you can manage the system and app...

Страница 10: ...rd with the following command Follow the step below to restart an OAP card To do Use the command Remarks Restart the OAP card oap reboot slot slot number system system name Required Available in user...

Страница 11: ...networking devices for cooperating to handle these services This gives full play to the advantages of respective manufacturers for better support of new services while reducing user investments The op...

Страница 12: ...FP collaboration policy that contains information including inbound interface and outbound interface of the packet and collaboration rules When the packet received by the ACFP server is redirected or...

Страница 13: ...irroring and redirect modes only The S5800 S5820X switches support carrying the preamble HGPlus as the context ID the HGPlus context only The above mentioned information indicates the collaboration ca...

Страница 14: ...ckets being forwarded for security first devices select the reserve action to discard the redirected and mirrored packets Priority Indicates the priority of a policy number notation in the range of 1...

Страница 15: ...d IP fragment Indicates whether the packet is an IP packet fragment Rate limit Row state You can use the collaboration policy to manage the collaboration rules that belong to it Using ACFP The S5800 a...

Страница 16: ...CFP server acfp server enable Required Disabled by default Enabling the ACFP trap function To make ACFP work normally you must enable the device to send traps of the ACFP module After the trap functio...

Страница 17: ...server display acfp server info begin exclude include regular expression Display the configuration information of an ACFP client display acfp client info client id begin exclude include regular expre...

Страница 18: ...as the ACFP clients which run applications of other vendors and support the IPS Intrusion Prevention System IDS services For more information about ACFP see ACFP configuration in the OAA Configuratio...

Страница 19: ...rts up and runs in the following procedures 1 Run the ACSEI client application to enable ACSEI client 2 Start up the device and enable the ACSEI server function on it 3 The ACSEI client multicasts reg...

Страница 20: ...server enable Required Enter ACSEI server view acsei server Configure the monitoring timer for ACSEI server to monitor ACSEI client acsei timer monitor seconds Optional Five seconds by default Closing...

Страница 21: ...client information display acsei client info client id begin exclude include regular expression Available in any view ACSEI client configuring OAP card As a function supported by the OAP card an ACSEI...

Страница 22: ...ACSEI client configuring OAP card 13 ACSEI server configuration switch 1 1 C Configuring an OAP card 1 Configuring the ACFP client OAP card 9 Configuring the ACFP server switch 8 I Introduction to ACF...

Отзывы: