Brocade TurboIron 24X Series Configuration Guide - Manual (Page 297)

Brocade TurboIron 24X Series Configuration Guide 263
53-1003053-01
Defining MAC address filters
Enabling logging of management traffic
permitted by MAC filters
You can configure the device to generate Syslog entries and SNMP traps for management traffic
that is permitted by MAC filters. Management traffic applies to packets that are destined for the
CPU, such as control packets. You can enable logging of permitted management traffic on a global
basis or an individual port basis.
The first time an entry in a MAC filter permits a management packet and logging is enabled for that
entry, the software generates a Syslog message and an SNMP trap. Messages for management
packets permitted by MAC filters are at the warning level of the Syslog.
When the first Syslog entry for a management packet permitted by a MAC filter is generated, the
software starts a five-minute timer. After this, the software sends Syslog messages every five
minutes. The messages list the number of management packets permitted by each MAC filter
during the previous five-minute interval. If a MAC filter does not permit any packets during the
five-minute interval, the software does not generate a Syslog entry for that MAC filter.
NOTE
For a MAC filter to be eligible to generate a Syslog entry for permitted management packets, logging
must be enabled for the filter. The Syslog contains entries only for the MAC filters that permit
packets and have logging enabled.
When the software places the first entry in the log, the software also starts the five-minute timer for
subsequent log entries. Thus, five minutes after the first log entry, the software generates another
log entry and SNMP trap for permitted management packets.
Configuration notes
MAC filter logging is supported in the TurboIron X Series devices.
These devies support MAC filter logging of management traffic only.
Command syntax
To configure MAC filter logging globally, enter the following CLI commands at the global CONFIG
level.
TurboIron(config)#mac filter log-enable
TurboIron(config)#write memory
Syntax: [no] mac filter log-enable
To configure MAC filter logging for MAC filters applied to ports 1 and 3, enter the following CLI
commands.
TurboIron(config)#int ethernet 1
TurboIron(config-if-e10000-1)#mac filter-group log-enable
TurboIron(config-if-e10000-1)#int ethernet 3
TurboIron(config-if-e10000-3)#mac filter-group log-enable
TurboIron(config-if-e10000-3)#write memory
Syntax: [no] mac filter-group log-enable