Egress Interface Selection (Eis); Important Points To Remember; Configuring Eis - Dell S6100 Configuration Manual

Hide thumbs Also See for S6100:
Table of Contents

Advertisement

Enable the interface.
INTERFACE mode
no shutdown
Configure a primary IP address and mask on the interface.
INTERFACE mode
ip address ip-address mask [secondary]
The ip-address must be in dotted-decimal format (A.B.C.D) and the mask must be in slash format (/xx).
Add the keyword secondary if the IP address is the interface's backup IP address.
Example of the show ip interface Command
You can only configure one primary IP address per interface. You can configure up to 255 secondary IP addresses on a single interface.
To view all interfaces to see with an IP address assigned, use the show ip interfaces brief command in EXEC mode as shown in
View Basic Interface
Information.
To view IP information on an interface in Layer 3 mode, use the show ip interface command in EXEC Privilege mode.
Dell>show ip interface vlan 58
Vlan 58 is up, line protocol is up
Internet address is 1.1.49.1/24
Broadcast address is 1.1.49.255
Address determined by config file
MTU is 1554 bytes
Inbound access list is not set
Proxy ARP is enabled
Split Horizon is enabled
Poison Reverse is disabled
ICMP redirects are not sent
ICMP unreachables are not sent
IP unicast RPF check is not supported

Egress Interface Selection (EIS)

EIS allows you to isolate the management and front-end port domains by preventing switch-initiated traffic routing between the two
domains. This feature provides additional security by preventing flooding attacks on front-end ports. The following protocols support EIS:
DNS, FTP, NTP, RADIUS, sFlow, SNMP, SSH, Syslog, TACACS, Telnet, and TFTP. This feature does not support sFlow on stacked units.
When you enable this feature, all management routes (connected, static, and default) are copied to the management EIS routing table. Use
the management route command to add new management routes to the default and EIS routing tables. Use the show ip
management-eis-route command to view the EIS routes.

Important Points to Remember

Deleting a management route removes the route from both the EIS routing table and the default routing table.
If the management port is down or route lookup fails in the management EIS routing table, the outgoing interface is selected based on
route lookup from the default routing table.
If a route in the EIS table conflicts with a front-end port route, the front-end port route has precedence.
Due to protocol, ARP packets received through the management port create two ARP entries (one for the lookup in the EIS table and
one for the default routing table).

Configuring EIS

EIS is compatible with the following protocols: DNS, FTP, NTP, RADIUS, sFlow, SNMP, SSH, Syslog, TACACS, Telnet, and TFTP.
Interfaces
379

Advertisement

Table of Contents
loading

Table of Contents