Manuel d'utilisation / d'entretien du produit AT X900-12XT/S du fabricant Allied Telesis
Aller à la page of 21
C613-16119-00 REV A www .alliedtelesis.com AlliedW ar e Plus TM OS How T o | Intr oduction The SwitchBlade x908 , x900-12XT/S, and x90 0-24 series switches supp or t a pow erful hardwar e based packet-filtering facility .
Page 2 | AlliedW are Plus™ OS How T o Note Introduction Contents Introduction .................................................................................................. ................ ............................ 1 Which products and softwar e v ersion does this Note apply to? .
Page 3 | AlliedW are Plus™ OS How T o Note Creating hardwar e A CLs Cr eating hardwar e A CLs Hardwar e A CLs contain both the match criteria and the action to take on matching traffic. There ar e two types of har dware A CL: IP ad dress and MA C address.
Page 4 | AlliedW are Plus™ OS How T o Note Creating hardwar e A CLs IP pack ets Y ou can filter IP packets on the basis of thei r source and/or destination IP addr esses.
Page 5 | AlliedW are Plus™ OS How T o Note Creating hardwar e A CLs TCP and UDP packets Y ou can filter TCP and UDP packets on the basis of: z sour ce IP address and/or destination IP ad dress (using the same syntax as when filtering IP pack ets) z sour ce and/or destination TCP/UDP por ts.
Page 6 | AlliedW are Plus™ OS How T o Note The effects of the action k eyw ords in A CLs Cr eating MA C addr ess hardwar e A CLs MA C address hardwar e A CLs filter pack ets on the basis of their source or destination MA C addr ess.
Page 7 | AlliedW are Plus™ OS How T o Note Making fi lters by a pplying har dware A CLs to ports Making filters by a pplying har dware A CLs to por ts Y ou can create a filter by simply a pplying one or more ACLs to a port, as long as y ou can select the matching traffic thr ough hard ware A CL ke ywords, as described abo ve.
Page 8 | AlliedW are Plus™ OS How T o Note Making filt ers by using QoS class-maps Making filters by using QoS class-ma ps QoS class-maps allow y ou to match on a m uch wi der range of pack et attributes than A CLs by themselves. The y do this by determining the match criteria fr om an A CL, or from match commands, or from both in combination.
Page 9 | AlliedW are Plus™ OS How T o Note Making filt ers by using QoS class-maps 3. Specify what the class-map will match on (see page 9 ). This inv olves: z attaching the A C L to the class-map z using other match commands to further limi t what the traffic will match the class-map (unless the A CL ’ s se ttings wer e enough) 4.
Page 10 | AlliedW are Plus™ OS How T o Note Making filt ers by using QoS class-maps Matching on “inner” k eyw ords f or nested VLANs The match tpid , matc h inner -tpid , match inner -vlan , and match inner -cos commands all apply to nested VLAN configuration.
Page 11 | AlliedW are Plus™ OS How T o Note Making filt ers by using QoS class-maps Matching on TCP flag Unlik e the other match commands, you can match on multiple TCP flags.
Page 12 | AlliedW are Plus™ OS How T o Note Making filt ers by using QoS class-maps Matching on eth-format and pr otocol Ethernet format and pr otocol are specified to gether , as a pair .
Page 13 | AlliedW are Plus™ OS How T o Note The logic of the operation of the har dware filters The logic of the operation of the hardwar e filters The operation of the filters follows the standar d ACL logic: if a pack et matches an A CL on the port, the comparison process stops and the action attached to the A CL is performed.
Page 14 | AlliedW are Plus™ OS How T o Note Examples Examples Blocking all multicast traffic This example uses an interface A CL with an action of deny . Consider a situation where m ultiple clients ar e attached to the switch, with each client attached to a differ ent por t.
Page 15 | AlliedW are Plus™ OS How T o Note Examples Blocking all multicast tr affic except one ad dress This example uses two interface A CLs, one with an action of permit and one with an action of deny . Use this type of configuration when y ou want to discard a wide range of traffic but want to forward a subset of traffic within that range.
Page 16 | AlliedW are Plus™ OS How T o Note Examples Mirr oring ARP pack ets This example uses a QoS class-map . Use this type of configuration when you want to mir ror a subset of the incoming traffic on a port, a nd y ou need to use QoS match comm ands to select the mirr ored traffic.
Page 17 | AlliedW are Plus™ OS How T o Note Examples Blocking TCP sessions in one dir ection This example uses two QoS class-maps. Administrators often want to block the establis hment of TCP sessions in one direction, but allow TCP sessions to be established in the opposi te dir ection.
Page 18 | AlliedW are Plus™ OS How T o Note Ho w many filters can you cr eate? How man y filters can you cr eate? The total number of filters that can be cr eate d is not an exact number , but depends on w hich fields the various filters are matching on.
Page 19 | AlliedW are Plus™ OS How T o Note Ho w many filters can you cr eate? 2. The pr ofile (mask) The other item is called the pr of ile. Conceptually , this is a 16 -byte mask that decides whic.
Page 20 | AlliedW are Plus™ OS How T o Note Ho w many filters can you cr eate? Ar e there enough bytes f or your set of filters? Of course, the mask cannot increase withou t limit—it has a maximum size of 16 b ytes.
USA Headq u ar ters | 19800 Nor th Cr eek Parkwa y | S u ite 200 | Bothell | WA 98011 | USA | T: +1 800 424 4284 | F: +1 425 481 3895 E u r opea n Headq u ar ters | Via Motta 24 | 6830 Chiasso | Switzerla n d | T: +41 91 69769.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté Allied Telesis AT X900-12XT/S c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du Allied Telesis AT X900-12XT/S - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation Allied Telesis AT X900-12XT/S, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le Allied Telesis AT X900-12XT/S va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le Allied Telesis AT X900-12XT/S, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du Allied Telesis AT X900-12XT/S.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le Allied Telesis AT X900-12XT/S. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei Allied Telesis AT X900-12XT/S ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
