OmniSwitch os6900, Руководство по настройке сети

Страница: 706 / 942

Quick Steps for Configuring UNP Configuring Universal Network Profiles
page 27-6 OmniSwitch AOS Release 7 Network Configuration Guide June 2013
-> show unp port
Port Mac-Auth Classification Default Pass-Alternate Trust-Tag
----+--------+-------------+-------+---------------+---------
1/1 Enabled Enabled Sales Sales_Alt Enabled
1/2 Enabled Disabled CustA Cust_Alt Disabled
1/3 Disabled Disabled Engr - Enabled
1/10 Enabled Enabled def_unp1 alt_unp1 Enabled
To display information about device MAC addresses learned on a UNP port, use the show unp user
command:
-> show unp user
User Auth
Port Username Mac address IP Vlan UNP Status
----+-----------------+-----------------+---------+----+-------+--------
1/1 00:00:00:00:00:01 00:00:00:00:00:01 10.0.0.1 10 Sales Active
1/1 00:80:df:00:00:02 00:80:df:00:00:02 10.0.0.2 20 Finance Active
1/2 00:80:df:00:00:03 00:80:df:00:00:03 20.0.0.5 30 - Block
1/10 00:00:2a:33:44:01 00:00:2a:33:44:01 30.0.0.1 40 serverA Active
See the OmniSwitch CLI Reference Guide for information about the fields in this display.
Quick Steps for Configuring UNP Classification Rules
When classification is enabled for a UNP port, UNP classification rules are applied to traffic received on
that port to determine the UNP VLAN assignment for the traffic. The following quick steps provide a brief
tutorial for configuring classification rules:
1
To configure a MAC address rule, use the unp classification mac-address command.
-> unp classification mac-address 00:00:2a:33:44:01 unp-name serverA
2
To configure a rule for a range of MAC addresses, use the unp classification mac-range command.
-> unp classification mac-address-range 00:00:2a:33:44:01 00:00:2a:33:44:10 unp-
name serverB
3
To configure an IP address rule, use the unp classification ip-address command.
-> unp classification ip-address 198.4.21.1 255.255.0.0 unp-name marketing
4
To configure a VLAN tag rule, use the unp classification vlan-tag command. This rule can also be
combined with any of the other rules (MAC address, MAC range, or IP address) to make the rule more
specific to a VLAN.
-> unp classification vlan-tag 400 unp-name admin
-> unp classification mac-address 00:0f:b5:46:d7:56 vlan-tag 100 unp-name
customerB
Note
.
Verify the UNP classification rule configuration using the show unp classification command:
-> show unp classification mac-rule
MAC Address UNP Name VLAN Tag
------------------+--------------------------------+---------
00:00:2a:33:44:01 serverA -
00:0f:b5:46:d7:56 customerB 100