Applying Ipv4-Acls On Gigabit Ethernet Interfaces; Arp Cache - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

ARP Cache

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
•
•
Tip If IPv4-ACLs are already configured in a Gigabit Ethernet interface, you cannot add this interface to an
Ethernet PortChannel group.
information on configuring IPv4-ACLs.

Applying IPv4-ACLs on Gigabit Ethernet Interfaces

To apply an IPv4-ACL on a Gigabit Ethernet interface, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# interface gigabitethernet 3/1
switch(config-if)#
Step 3
switch(config-if)# ip access-group SampleName
Step 4
switch(config-if)# ip access-group SampleName1 in
switch(config-if)# ip access-group SampleName2 out
ARP Cache
Cisco MDS SAN-OS supports ARP cache for Gigabit Ethernet interface configured for IPv4. This
section includes the following topics:
•
•
Cisco MDS 9000 Family CLI Configuration Guide
45-8
Other protocols such as User Datagram Protocol (UDP) and HTTP are not supported in
Note
Gigabit Ethernet interfaces. Applying an ACL that contains rules for these protocols to a
Gigabit Ethernet interface is allowed but those rules have no effect.
Apply IPv4-ACLs to the interface before you enable an interface. This ensures that the filters are in
place before traffic starts flowing.
Be aware of the following conditions:
If you use the log-deny option, a maximum of 50 messages are logged per second.
–
The established option is ignored when you apply IPv4-ACLs containing this option to Gigabit
–
Ethernet interfaces.
If an IPv4-ACL rule applies to a pre-existing TCP connection, that rule is ignored. For example
–
if there is an existing TCP connection between A and B and an IPv4-ACL which specifies
dropping all packets whose source is A and destination is B is subsequently applied, it will have
no effect.
Chapter 33, "Configuring IPv4 and IPv6 Access Control Lists,"
Displaying ARP Cache, page 45-9
Clearing ARP Cache, page 45-9
Chapter 45 Configuring IPv4 for Gigabit Ethernet Interfaces
Purpose
Enters configuration mode.
Configures a Gigabit Ethernet interface
(3/1).
Applies the IPv4-ACL SampleName on
Gigabit Ethernet 3/1 for both ingress and
egress traffic (if the association does not
exist already).
Applies the IPv4-ACL SampleName on
Gigabit Ethernet 3/1 for ingress traffic.
Applies the IPv4-ACL SampleName on
Gigabit Ethernet 3/1 for egress traffic (if
the association does not exist already).
OL-16184-01, Cisco MDS SAN-OS Release 3.x
for