H3C S6890 Series, Справочник по командам Openflow

Страница: 31 / 36

25
Default
An OpenFlow instance is not configured to act as an SSL server to listen to controllers.
Views
OpenFlow instance view
Predefined user roles
network-admin
Parameters
port-number
: Specifies the SSL server port number in the range of 1 to 65535.
ssl ssl-policy-name
: Specifies the SSL server policy name, a case-insensitive string of 1 to 31
characters.
Usage guidelines
Typically, an OpenFlow instance acts as the TCP/SSL client and actively connects to the controller
(SSL server). You can configure this feature to enable an SSL server for an OpenFlow instance.
Then, the controller acts as an SSL client and actively connects to the OpenFlow instance. For more
information about SSL,
see Security Configuration Guide .
To re-configure the SSL server, first execute the
undo
form of the command to delete the existing
SSL server configuration.
Examples
# Configure OpenFlow instance 1 to act as an SSL server to listen to controllers. The listening port
number is 20000 and the SSL server policy name is
ssl_name .
<Sysname> system-view
[Sysname] openflow instance 1
[Sysname-of-inst-1] listening port 20000 ssl ssl_name
mac-ip dynamic-mac aware
Use
mac-ip dynamic-mac aware
to configure an OpenFlow instance to support matching the
dynamic MAC addresses in the flow entry query and deletion instructions sent from controllers.
Use
undo mac-ip dynamic-mac aware
to restore the default.
Syntax
mac-ip dynamic-mac aware
undo mac-ip dynamic-mac aware
Default
An OpenFlow instance ignores the dynamic MAC addresses in the flow entry query and deletion
instructions sent from controllers.
Views
OpenFlow instance view
Predefined user roles
network-admin
Usage guidelines
Only MAC-IP flow tables support this command,