Avaya Cajun P580 Istruzioni per l'installazione e il funzionamento

User Guide Addendum for the Avaya

P580 and P882 Multiservice Switches,

Software Version 5.4

Overview

This addendum provides information and procedures that will be

added to later versions of the user documentation. Version 5.4 of the

application software is supported only by the M8000R-SUP

supervisor module.

This addendum is updated periodically with new information. To

download the most current version of this document, see http://

support.avaya.com. Click Product Documentation.

This addendum includes the following topics:

■New Hardware Features on page 2

■New Software Features on page 2

■Updated CLI Commands on page 4

■Logging ACL Activity on page 4

■Configuring Custom Access Types on page 9

■Configuring Utilization Monitoring on page 17

■Configuring Short-Lived IP Protocol Filters on page 22

■Documentation Updates and Corrections on page 26

■Technical Support on page 37

■Documentation Feedback on page 37

User Guide Addendum for the Avaya P580 and P882, v5.4

2 December 2, 2002 Part No. 610-0211-094

New Hardware Features

Version 5.4 provides support for the following new hardware:

■10-Gigabit Uplink module.

For information about how to install the 10-Gigabit Uplink

module, see Installing the Avaya 10-Gigabit Uplink Module. For

information about how to configure the module, see

Appendix A, "Configuring the Avaya 10-Gigabit Uplink

Module."

New Software Features

Version 5.4 provides support for the following new software

features:

Security Features ■ACL Logging. This feature logs information about a sampling

of packets that match specific rules in the active access

control list. For information on how to use the ACL Logging

feature, see Logging ACL Activity on page 4.

■Ability to select read-only permission or read-write

permission for custom access types. For information on how

to specify these permissions when you create a custom access

type, see Configuring Custom Access Types on page 9.

Performance

Features ■Utilization Monitoring. This feature makes it possible for you

to monitor utilization of the:

—CPU—the number of packets per second that the CPU on

the supervisor module routes (slow path).

—Forwarding engine—the number of packets per second

that the 80-series forwarding engines route. This statistic

includes packets routed by the forwarding engines on 80-

series media modules (FIRE) and on the supervisor

module (FORE).

For more information about the slow path and FIRE and

FORE paths, see “Routing Overview” in Chapter 1,

“Introduction,” of the Avaya P550R, P580, P880, and P882

Multiservice Switch User Guide.

Doc. No. 650-100-701

Part No. 610-0211-094 December 2, 2002 3

For each of these statistics, you can set a high threshold. If

this threshold is exceeded, the switch logs the event in the

event log. For information on how to configure utilization

monitoring, see "Configuring Utilization Monitoring" on

page 17.

■Short-lived protocol filters. This feature helps conserve the

forwarding engine resources of the switch. By using a short-

lived protocol filter, you can set the switch to use the slow

path to route packets of a specific short-lived protocol. And

by using the slow path to route short-lived protocol traffic,

you conserve the resources of the forwarding engines.

For information on how to configure short-lived protocol

filters, see "Configuring Short-Lived IP Protocol Filters" on

page 22.

MIB Support ■The following groups and objects in the RMON2 MIB,

documented in RFC 2021:

—Protocol Directory (protocolDir) Group

• Protocol Directory Last Change

(protocolDirLastChange) object

• Protocol Directory Table (protocolDirTable)

The following protocols are supported in this table:

Ethernet II, SNAP, IP, IPX, TCP, and UDP.

—Address Map (addressMap) Group:

• Address Map Table (addressMapTable)

—Probe Configuration (probeConfig) Group

• Probe Capabilities (probeCapabilities) object

• Network Configuration Table (netConfigTable)

• Network Default Gateway (netDefaultGateway) object

■The following table in the HCRMON MIB (draft-ietf-

rmonmib-hcrmon-10.mib), documented in RFC 3273:

—Ethernet Statistics High Capacity Table

(etherStatsHighCapacityTable)

User Guide Addendum for the Avaya P580 and P882, v5.4

4 December 2, 2002 Part No. 610-0211-094

Updated CLI Commands

show custom-access-type

Command Mode User.

Description Displays the custom access types that are currently configured on

the switch.

Syntax show custom-access-type

Sample Output The following example displays the custom access types that are

currently configured on a switch:

Avaya>show custom-access-type

Systems Avaya P580 and P882 Multiservice switches.

Logging ACL Activity

Overview

You can now log information about packets that match specific rules

in the active access control list (ACL). Each log entry contains the

following information:

■Source and destination IP address.

■Protocol ID (RFC 1700 defines these ID numbers).

■Time that the match occurred.

■Index number of the access rule that was matched.

Custom Access Type

Name

----------------

Sys

Cfg.

----

Mod

Port

Cfg.

----

Event

Mgmt.

-----

Switching

---------

Routing

-------

admin rw rw rw rw rw

CAT1 ro rw -- -- --

Doc. No. 650-100-701

Part No. 610-0211-094 December 2, 2002 5

■Forwarding information:

—The priority of the packet if the ACL assigns it a priority

and forwards it.

—Forward with no change in priority if the ACL

forwards the packet without changing its priority.

—FILTER if the ACL blocks the packet.

To avoid excessive consumption of the switch resources, ACL

matches are logged for slow path traffic at specific time intervals.

You can set the interval at which the matches are logged. The

default setting is two seconds.

ACL matches are not logged for FIRE path or FORE path traffic. For

more information about the slow path and FIRE and FORE paths,

see “Routing Overview” in Chapter 1, “Introduction,” of the Avaya

P550R, P580, P880, and P882 Multiservice Switch User Guide.

This section includes procedures for the following tasks:

■Enabling ACL Logging on page 5

■Setting a Logging Interval on page 7

Enabling ACL Logging

Web Agent

Procedure To enable ACL logging by using the Web Agent:

1. In the navigation pane, expand the Routing > IP >

Configuration folders, and then click Access Lists.

The IP Access List Web page is displayed in the content pane.

See Figure 1.

User Guide Addendum for the Avaya P580 and P882, v5.4

6 December 2, 2002 Part No. 610-0211-094

Figure 1. IP Access List Web page

2. Select the check box next to each rule that you want to

enable ACL logging for.

3. In the Rule Match Logging column, select Enable for each

access rule that you want to enable ACL logging for.

The default setting for ACL logging is disabled.

4. Click Apply.

CLI Command To enable ACL logging, enter Global Configuration mode and use the

following command:

ip acl-logging enable <access-list-name> <rule-number>

The default setting for ACL logging is disabled.

Table 1. Keywords, Arguments, and Options

Keyword, Argument,

or Option Definition

<access-list-name> The access list that contains the access

rule for which you want to enable ACL

logging.

<rule-number> The number of the access rule for which

you want to enable ACL logging.

Doc. No. 650-100-701

Part No. 610-0211-094 December 2, 2002 7

To disable ACL logging, enter Global Configuration mode and use the

following command:

ip acl-logging disable <access-list-name> <rule-number>

Sample Event Log

Entries Figure 2 displays sample ACL matches in the event log.

Figure 2. Sample ACL matches in the event log

Setting a Logging Interval

Web Agent

Procedure To set the interval for ACL logging:

1. In the navigation pane, expand the Routing > IP >

Configuration folders, and then click Access Control.

The IP Access Control Web page is displayed in the content

pane. See Figure 3.

User Guide Addendum for the Avaya P580 and P882, v5.4

8 December 2, 2002 Part No. 610-0211-094

Figure 3. IP Access Control Web page

2. In the Interval between logging of Access Rule Matches

(in seconds) field, enter the interval at which you want ACL

matches logged. Enter an interval from 1 to 60 seconds.

The default setting is 2 seconds.

3. Click Apply.

CLI Command To set the interval for ACL logging, enter Global Configuration mode

and use the following command:

ip acl-logging logging-interval <time-in-seconds>

The default setting is 2 seconds.

Table 2. Keywords, Arguments, and Options

Keyword, Argument,

or Option Definition

<time-in-seconds> The interval at which you want ACL

matches logged. Enter an interval from 1

to 60 seconds.

Doc. No. 650-100-701

Part No. 610-0211-094 December 2, 2002 9

Configuring Custom Access Types

This section contains procedures for the following tasks:

■Creating a Custom Access Type on page 9

■Viewing Custom Access Types on page 13

■Modifying a Custom Access Type on page 14

* Note: To log in to the ATM Uplink module, a user must:

• Have read-write access to the Modules and Ports

Management features.

• Enter Privileged mode or Global Configuration mode to

enter the session <slot number> command.

In earlier versions of application software, you could log

in to the ATM Uplink module from User mode. This

change in functionality prevents unauthorized users from

logging in to the ATM Uplink module.

Creating a Custom Access Type

Web Agent

Procedure To create a custom access type:

1. In the navigation pane, expand the System >

Administration folders, and then click Custom Access

Types.

The Custom Access Types Web page is displayed in the

content pane. See Figure 4.

User Guide Addendum for the Avaya P580 and P882, v5.4

10 December 2, 2002 Part No. 610-0211-094

Figure 4. Custom Access Types Web page

2. On the Custom Access Types Web page, click Create.

The Create Custom Access Type Web page is displayed in the

content pane. See Figure 5.

Altri manuali per Cajun P580

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Avaya Interruttore

Avaya

Avaya P333R-LB Manuale di istruzioni

Avaya

Avaya 8600 Manuale utente

Avaya

Avaya Cajun P580 Manuale utente

Avaya

Avaya VSP 4450GSX-PWR+ Manuale di istruzioni

Avaya

Avaya IP Office IP401 Manuale utente

Avaya

Avaya 5900 Series Manuale utente

Avaya

Avaya P332MF Manuale utente

Avaya

Avaya 4550T-PWR+ Manuale utente

Avaya

Avaya Virtual Services Platform 7000 Series Manuale utente

Avaya

Avaya ERS 2500 Istruzioni operative

Avaya

Avaya C360 Manager Istruzioni operative e di manutenzione

Avaya

Avaya C360 Manager Manuale dell'operatore

Avaya

Avaya 4500 Series Manuale utente

Avaya

Avaya Scopia XT Camera Switch Manuale utente

Avaya

Avaya WLAN Security Switch 2300 Series Guida

Avaya

Avaya Cajun P550R Manuale utente

Avaya

Avaya Cajun P333T Manuale utente

Avaya

Avaya 8800 Series Guida rapida

Avaya

Avaya C360 Manager Manuale utente

Avaya

Avaya 3500 series Manuale di istruzioni

Avaya

Avaya P332MF Manuale utente

Avaya

Avaya ERS 3500 Series Manuale utente

Avaya

Avaya VSP 7000 Series Manuale di istruzioni

Avaya

Avaya Ethernet Routing Switch 8300 Series Manuale utente

Manuali Interruttore popolari di altre marche

URC

URC Total Control MFS-8 Manuale utente

Azbil

Azbil HPQ-D11 Manuale utente

Sony

Sony DFS-900M Manuale utente

SICK

SICK i17S Manuale utente

F&F

F&F SZR-277 Manuale utente

Shure

Shure UAMS/BK Manuale utente

Dräger

Dräger X-zone Switch Off Manuale utente

Asco

Asco Joucomatic 349 Series Manuale utente

BT Mini Hub Manuale utente

D-Link

D-Link DES-1226G Manuale utente

Johnson Controls

Johnson Controls FS80-C Manuale utente

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuale utente

MicroNet

MicroNet SP1200A Manuale utente

Ruijie

Ruijie RG-PF2920 Series Manuale di installazione e funzionamento

Altinex

Altinex DA1914SX Manuale utente

MiLAN

MiLAN MIL-SM2401M Manuale utente

RJM

RJM MASTERMIND PBC/6X Manuale utente

Atlas

Atlas MMK-KVM8 Manuale utente