Acfp collaboration policy, Acfp collaboration rules – H3C Technologies H3C S12500 Series Switches User Manual
Page 15
8
•
ACFP client identifier. It can be assigned by the ACFP server through a collaboration protocol or
specified by the network administrator to make sure that each ACFP client has a unique client ID on
the ACFP server.
•
Description—ACFP client description information.
•
Hw-Info—ACFP client hardware type, version number, and so on.
•
OS-Info—System name and version number of the ACFP client.
•
App-Info—Application software type and version number of the ACFP client.
•
Client IP—ACFP client IP address.
•
Client Mode—Working mode supported by the ACFP client, namely, the combination of the host,
pass-through, mirroring, and redirect modes.
ACFP collaboration policy
ACFP collaboration policy refers to the collaboration policy that the ACFP client sends to the ACFP server
for application. The policy information includes the following parts:
•
Client ID—ACFP client identifier.
•
Policy-Index
•
In-interface—Interface through which the packet is sent to the ACFP server.
•
Out-interface—Interface through which the packet is forwarded correctly.
•
Dest-interface—ACFP server interface connected with ACFP client.
•
Context ID—Used when the packet is mirrored or redirected to an ACFP client. After the interface
connected to the ACFP client is specified in the policy sent, the ACFP server assigns it a global serial
number, that is, the Context ID, with each Context ID corresponding to an ACFP collaboration
policy.
•
Admin-Status—Whether to enable the policy.
•
Effect-Status—Expiration time of the policy and its rules.
•
Start-Time—Time (second/minute/hour) when the policy and its rules become effective.
•
End-time—Time (second/minute/hour) when the policy and its rules become ineffective.
•
DestIfFailAction—If the policy dest-interface is down, the actions to all rules under the policy will be
as follows: for forwarding first switches, select the delete action to keep the redirected and mirrored
packets being forwarded; for security first switches, select the reserve action to discard the
redirected and mirrored packets.
•
Priority—Priority of a policy, indicated by a number in the range of 1 to 8. The bigger the number,
the higher the priority.
ACFP collaboration rules
ACFP collaboration rules refer to the collaboration rules that the ACFP client sends to the ACFP server for
application. There are three types of collaboration rules:
•
Monitoring rules—Monitoring, analyzing, and processing the packets to be sent to the ACFP client.
The action types corresponding to monitoring rules are redirect and mirror.
•
Filtering rules—Determining which packets to deny and which packets to permit. The action types
corresponding to filtering rules are deny and permit.
•
Restricting rules—Determining the rate of which packets is to be restricted. The action type
corresponding to restricting rules is rate.
Rule information is described as follows: