Ip receive access list, Configuring ip receive access list, Displaying ip receive access list – Brocade BigIron RX Series Configuration Guide User Manual

Page 293

Advertising
background image

BigIron RX Series Configuration Guide

215

53-1002484-04

Configuring forwarding parameters

7

1 0.0.0.0/0 100.1.1.2 eth 7/1 1/1 S

0.0.0.0/0 100.1.2.2 eth 7/2 1/1 S

0.0.0.0/0 100.1.3.2 eth 7/3 1/1 S

0.0.0.0/0 100.1.4.2 eth 7/4 1/1 S

2 10.0.0.0/8 10.43.2.1 mgmt 1 1/1 S

3 10.43.2.0/24 DIRECT mgmt 1 0/0 D

4 40.0.0.0/24 100.1.1.2 eth 7/1 1/1 S

5 70.1.1.0/24 DIRECT eth 7/9 0/0 D

6 100.1.1.0/24 DIRECT eth 7/1 0/0 D

7 100.1.2.0/24 DIRECT eth 7/2 0/0 D

8 100.1.3.0/24 DIRECT eth 7/3 0/0 D

9 100.1.4.0/24 DIRECT eth 7/4 0/0 D

IP receive access list

The IP receive access list feature uses IPv4 ACLs to filter the packets intended for the management
process to protect the management module from being overloaded with heavy traffic that was sent
to one of the Layer 3 Switch IP interfaces. The feature applies to IPv4 unicast and multicast
packets.

Configuring IP receive access list

IP receive access list is a global configuration command. Once it is applied, the command will be
effective on all the management modules on the device. To configure the feature, do the following.

1. Create a numbered ACL that will be used as the IP receive ACL. This ACL can be a standard (1–

99) or extended (100–199) ACL. Named ACLs are not supported.

BigIron RX(config)# access-list 10 deny host 209.157.22.26 log

BigIron RX(config)# access-list 10 deny 209.157.29.12 log

BigIron RX(config)# access-list 10 deny host IPHost1 log

BigIron RX(config)# access-list 10 permit any

BigIron RX(config)# write memory

2. Configure ACL 10 as the IP receive access list by entering the following command.

BigIron RX(config)# ip receive access-list 10

Syntax: [no] ip receive access-list <num>

Specify an access list number for <num>.

The IP receive ACL is applied globally to all interfaces on the device.

Displaying IP receive access list

To determine if IP receive access list has been configured on the device, enter the following
command.

BigIron RX# show access-list bindings

L4 configuration:

ip receive access-list 101

Advertising