Brocade Multi-Service IronWare Security Configuration Guid Manual de usuario descargar pdf (Pagina 239)

Multi-Service IronWare Security Configuration Guide 221

53-1003035-02

IPv6 receive ACLs

Brocade(config)# system-max ipv6-receive-cam 1024

Reload required. Please write memory and then reload or power cycle the system.

Failure to reload could cause system instability on failover.

Newly configured system-max will not take effect during hitless-reload.

Checking for available space when changing the CAM profile

The system will check if there is enough space for the IPv6 Receive ACL sub-partition before

changing the CAM profile. If there is not enough space, an error message is displayed.

This error message shows that there are 1920 available user entries for IPv6 rACL CAM. In this

case, the CAM profile is “multi-service 2” which supports 1024 IPv6 rACL CAM entries. Refer to

Table 32 for on the maximum supported size of IPv6 Receive ACLs in different CAM profiles. Use

the following command to change the CAM profile to the “multi-service 3” which supports 2048

IPv6 rACLs.

Brocade(config)# cam-partition profile multi-service-3

Reload required. Please write memory and then reload or power cycle the system.

IPv6 receive ACL: basic configuration

Configuring and applying an IPv6 rACL

Configuring IPv6 rACLs requires the following steps:

1. Configuring an IPv6 rACL sub-partition in the CAM partition

2. Creating an IPv6 access-list

3. Creating a policy-map (if you want to rate limit traffic)

4. Applying an IPv6 rACL

Configuring an IPv6 rACL sub-partition in the CAM partition

To create an IPv6 rACL sub-partition and set the maximum number of IPv6 rACL entries at 1024,

use the following commands.

Brocade(config)# system-max ipv6-receive-cam 1024

Brocade(config)# write memory

Brocade(config)# reload

Creating an IPv6 access-list

To create an IPv6 access-list named “b1”:

Brocade(config)# ipv6 access-list b1

Brocade(config-ipv6-access-list b1)# permit ipv6 any any

Brocade(config-ipv6-access-list b1)# exit

Brocade(config)# system-max ipv6-receive-cam 2048

Brocade(config)# cam-partition profile multi-service-2

Error - IPV6 Receive ACL CAM (2048) exceeding available CAM resources

Total IPv6 ACL CAM: 16384(Raw Size)

Reserved IPv6 Rule ACL CAM: 1024(Raw Size)

IPv6 Multicast CAM: 0(Raw Size)

Available IPv6 Receive ACL CAM: 15360(Raw Size) 1920(User Size)

1 2 ... 234 235 236 237 238 239 240 241 242 243 244 ... 369 370

Sin comentarios

Brocade Multi-Service IronWare Security Configuration Guid Manual de usuario Pagina 239