Passer au contenu principal
  • Passer des commandes rapidement et facilement
  • Afficher les commandes et suivre l’état de votre expédition
  • Créez et accédez à une liste de vos produits
  • Gérer vos sites, vos produits et vos contacts au niveau des produits Dell EMC à l’aide de la rubrique Gestion des informations de l’entreprise.

Dell PowerEdge FN I/O Module Configuration Guide 9.10(0.0)

PDF

Configuring ACL VLAN Groups and Configuring FP Blocks for VLAN Parameters

This section describes how to optimize the utilization of CAM blocks by configuring ACL VLAN groups that you can attach to VLAN interfaces and also how to configure FP blocks for different VLAN operations.

Configuring ACL VLAN Groups

You can create an ACL VLAN group and attach the ACL with the VLAN members. The optimization is applicable only when you create an ACL VLAN group. If you apply an ACL separately on the VLAN interface, each ACL has a mapping with the VLAN and increases the CAM space utilization. Attaching an ACL individually to VLAN interfaces is similar to the behavior of ACL-VLAN mapping storage in CAM prior to the implementation of the ACL VLAN group functionality.
  1. Create an ACL VLAN group CONFIGURATION mode acl-vlan-group { group name} You can have up to eight different ACL VLAN groups at any given time.
  2. Add a description to the ACL VLAN group. CONFIGURATION (conf-acl-vl-grp) mode description description
  3. Apply an egress IP ACL to the ACL VLAN group. CONFIGURATION (conf-acl-vl-grp) mode ip access-group { group name} out implicit-permit
  4. Add VLAN member(s) to an ACL VLAN group. CONFIGURATION (conf-acl-vl-grp) mode member vlan { VLAN-range}
  5. Display all the ACL VLAN groups or display a specific ACL VLAN group, identified by name. CONFIGURATION (conf-acl-vl-grp) mode show acl-vlan-group { group name | detail}
    Dell#show acl-vlan-group detail
                                           
                                           Group Name :
                                           TestGroupSeventeenTwenty
                                           Egress IP Acl :
                                           SpecialAccessOnlyExpertsAllowed
                                           Vlan Members :
                                           100,200,300
                                           
                                           Group Name :
                                           CustomerNumberIdentificationEleven
                                           Egress IP Acl :
                                           AnyEmployeeCustomerElevenGrantedAccess
                                           Vlan Members :
                                           2-10,99
                                           
                                           Group Name :
                                           HostGroup
                                           Egress IP Acl :
                                           Group5
                                           Vlan Members :
                                           1,1000
                                           Dell#
                                        

Configuring FP Blocks for VLAN Parameters

Use the cam-acl-vlan command to allocate the number of FP blocks for the various VLAN processes on the system. You can use the no version of this command to reset the number of FP blocks to default. By default, 0 groups are allocated for the ACL in VCAP. ACL VLAN groups or CAM optimization is not enabled by default, and you need to allocate the slices for CAM optimization.
  1. Allocate the number of FP blocks for VLAN Open Flow operations. CONFIGURATION mode cam-acl-vlan vlanopenflow <0-2>
  2. Allocate the number of FP blocks for VLAN iSCSI counters. CONFIGURATION mode cam-acl-vlan vlaniscsi <0-2>
  3. Allocate the number of FP blocks for ACL VLAN optimization feature. CONFIGURATION mode cam-acl-vlan vlanaclopt <0-2>
  4. View the number of flow processor (FP) blocks that is allocated for the different VLAN services. EXEC Privilege mode
    Dell#show cam-usage switch 
                                           
                                           Linecard|Portpipe| CAM Partition   | Total CAM   |  Used CAM   |Available CAM
                                           ========|========|=================|=============|=============|==============
                                           11   |   0    | IN-L2 ACL       |      7152   |         0   |      7152    
                                           |        | IN-L2 FIB       |     32768   |      1081   |     31687    
                                           |        | OUT-L2 ACL      |         0   |         0   |         0    
                                           11   |   1    | IN-L2 ACL       |      7152   |         0   |      7152    
                                           |        | IN-L2 FIB       |     32768   |      1081   |     31687    
                                           |        | OUT-L2 ACL      |         0   |         0   |         0 
                                           
                                        

Évaluez ce contenu

Précis
Utile
Facile à comprendre
Avez-vous trouvé cet article utile ?
0/3000 characters
  Veuillez attribuer une note (1 à 5 étoiles).
  Veuillez attribuer une note (1 à 5 étoiles).
  Veuillez attribuer une note (1 à 5 étoiles).
  Veuillez indiquer si l’article a été utile ou non.
  Les commentaires ne doivent pas contenir les caractères spéciaux : <>()\