Brocade Network Advisor SAN + IP User Manual v12.1.0 - Manual (Page 23)

Brocade Network Advisor SAN + IP User Manual xxiii
53-1002949-01
Deleting a policy or rule. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 745
Deploying a PBR policy on demand . . . . . . . . . . . . . . . . . . . . . 745
Saving a PBR policy deployment. . . . . . . . . . . . . . . . . . . . . . . . 746
Scheduling a PBR policy deployment . . . . . . . . . . . . . . . . . . . . 747
ACL Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .750
Enabling or disabling ACL accounting . . . . . . . . . . . . . . . . . . .750
Resetting ACL counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .750
Viewing ACL counters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .751
Chapter 22 Security Management
Security overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .753
Layer 2 access control list management. . . . . . . . . . . . . . . . . . . . .753
IronWare Layer 2 ACL configuration . . . . . . . . . . . . . . . . . . . . .754
Fabric OS Layer 2 ACL configuration . . . . . . . . . . . . . . . . . . . . 761
Creating a Layer 2 ACL from a saved configuration. . . . . . . . .767
Deleting a Layer 2 ACL configuration from the application. . .768
Deleting a Layer 2 ACL configuration from the switch. . . . . . .768
Network OS Layer 2 ACL configuration. . . . . . . . . . . . . . . . . . .769
Layer 3 access control list policy . . . . . . . . . . . . . . . . . . . . . . . . . . .772
Creating a standard L3 ACL configuration . . . . . . . . . . . . . . . .773
Creating a L3 ACL from a saved configuration. . . . . . . . . . . . .775
Editing a standard L3 ACL configuration . . . . . . . . . . . . . . . . .775
Copying a standard L3 ACL configuration . . . . . . . . . . . . . . . . 776
Creating an extended L3 ACL configuration. . . . . . . . . . . . . . .777
Editing an extended L3 ACL configuration . . . . . . . . . . . . . . . .779
Copying an extended L3 ACL configuration . . . . . . . . . . . . . . .780
Creating an IPv6 L3 ACL configuration. . . . . . . . . . . . . . . . . . .781
Editing an IPv6 L3 ACL configuration . . . . . . . . . . . . . . . . . . . .783
Copying an IPv6 L3 ACL configuration . . . . . . . . . . . . . . . . . . .784
Deleting a L3 ACL configuration . . . . . . . . . . . . . . . . . . . . . . . .785
Assigning a L3 ACL configuration to an interface . . . . . . . . . .785
Clearing L3 ACL assignments . . . . . . . . . . . . . . . . . . . . . . . . . .787
Configuring the ACL configuration type and operations . . . . .788
Configuring hit statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .788
Configuring L3 ACL advanced settings. . . . . . . . . . . . . . . . . . .789
Network configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .793
Network group configuration. . . . . . . . . . . . . . . . . . . . . . . . . . .797
Service configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .802
Service group configuration . . . . . . . . . . . . . . . . . . . . . . . . . . .806
Media Access Control (MAC) filter management . . . . . . . . . . . . . .810
Creating a MAC filter configuration. . . . . . . . . . . . . . . . . . . . . .811
Creating a MAC filter from a saved configuration . . . . . . . . . .813
Editing a MAC filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .814
Copying a MAC filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .815
Deleting a MAC filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 817
Assigning MAC filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 817
Clearing MAC filter assignments. . . . . . . . . . . . . . . . . . . . . . . .818
Adding a MAC filter configuration to an interface . . . . . . . . . .818