Avaya Cajun P580 Instructions d'installation et d'utilisation

User Guide Addendum for the Avaya

P580 and P882 Multiservice Switches,

Software Version 5.4

Overview

This addendum provides information and procedures that will be

added to later versions of the user documentation. Version 5.4 of the

application software is supported only by the M8000R-SUP

supervisor module.

This addendum is updated periodically with new information. To

download the most current version of this document, see http://

support.avaya.com. Click Product Documentation.

This addendum includes the following topics:

■New Hardware Features on page 2

■New Software Features on page 2

■Updated CLI Commands on page 4

■Logging ACL Activity on page 4

■Configuring Custom Access Types on page 9

■Configuring Utilization Monitoring on page 17

■Configuring Short-Lived IP Protocol Filters on page 22

■Documentation Updates and Corrections on page 26

■Technical Support on page 37

■Documentation Feedback on page 37

User Guide Addendum for the Avaya P580 and P882, v5.4

2 December 2, 2002 Part No. 610-0211-094

New Hardware Features

Version 5.4 provides support for the following new hardware:

■10-Gigabit Uplink module.

For information about how to install the 10-Gigabit Uplink

module, see Installing the Avaya 10-Gigabit Uplink Module. For

information about how to configure the module, see

Appendix A, "Configuring the Avaya 10-Gigabit Uplink

Module."

New Software Features

Version 5.4 provides support for the following new software

features:

Security Features ■ACL Logging. This feature logs information about a sampling

of packets that match specific rules in the active access

control list. For information on how to use the ACL Logging

feature, see Logging ACL Activity on page 4.

■Ability to select read-only permission or read-write

permission for custom access types. For information on how

to specify these permissions when you create a custom access

type, see Configuring Custom Access Types on page 9.

Performance

Features ■Utilization Monitoring. This feature makes it possible for you

to monitor utilization of the:

—CPU—the number of packets per second that the CPU on

the supervisor module routes (slow path).

—Forwarding engine—the number of packets per second

that the 80-series forwarding engines route. This statistic

includes packets routed by the forwarding engines on 80-

series media modules (FIRE) and on the supervisor

module (FORE).

For more information about the slow path and FIRE and

FORE paths, see “Routing Overview” in Chapter 1,

“Introduction,” of the Avaya P550R, P580, P880, and P882

Multiservice Switch User Guide.

Doc. No. 650-100-701

Part No. 610-0211-094 December 2, 2002 3

For each of these statistics, you can set a high threshold. If

this threshold is exceeded, the switch logs the event in the

event log. For information on how to configure utilization

monitoring, see "Configuring Utilization Monitoring" on

page 17.

■Short-lived protocol filters. This feature helps conserve the

forwarding engine resources of the switch. By using a short-

lived protocol filter, you can set the switch to use the slow

path to route packets of a specific short-lived protocol. And

by using the slow path to route short-lived protocol traffic,

you conserve the resources of the forwarding engines.

For information on how to configure short-lived protocol

filters, see "Configuring Short-Lived IP Protocol Filters" on

page 22.

MIB Support ■The following groups and objects in the RMON2 MIB,

documented in RFC 2021:

—Protocol Directory (protocolDir) Group

• Protocol Directory Last Change

(protocolDirLastChange) object

• Protocol Directory Table (protocolDirTable)

The following protocols are supported in this table:

Ethernet II, SNAP, IP, IPX, TCP, and UDP.

—Address Map (addressMap) Group:

• Address Map Table (addressMapTable)

—Probe Configuration (probeConfig) Group

• Probe Capabilities (probeCapabilities) object

• Network Configuration Table (netConfigTable)

• Network Default Gateway (netDefaultGateway) object

■The following table in the HCRMON MIB (draft-ietf-

rmonmib-hcrmon-10.mib), documented in RFC 3273:

—Ethernet Statistics High Capacity Table

(etherStatsHighCapacityTable)

User Guide Addendum for the Avaya P580 and P882, v5.4

4 December 2, 2002 Part No. 610-0211-094

Updated CLI Commands

show custom-access-type

Command Mode User.

Description Displays the custom access types that are currently configured on

the switch.

Syntax show custom-access-type

Sample Output The following example displays the custom access types that are

currently configured on a switch:

Avaya>show custom-access-type

Systems Avaya P580 and P882 Multiservice switches.

Logging ACL Activity

Overview

You can now log information about packets that match specific rules

in the active access control list (ACL). Each log entry contains the

following information:

■Source and destination IP address.

■Protocol ID (RFC 1700 defines these ID numbers).

■Time that the match occurred.

■Index number of the access rule that was matched.

Custom Access Type

Name

----------------

Sys

Cfg.

----

Mod

Port

Cfg.

----

Event

Mgmt.

-----

Switching

---------

Routing

-------

admin rw rw rw rw rw

CAT1 ro rw -- -- --

Doc. No. 650-100-701

Part No. 610-0211-094 December 2, 2002 5

■Forwarding information:

—The priority of the packet if the ACL assigns it a priority

and forwards it.

—Forward with no change in priority if the ACL

forwards the packet without changing its priority.

—FILTER if the ACL blocks the packet.

To avoid excessive consumption of the switch resources, ACL

matches are logged for slow path traffic at specific time intervals.

You can set the interval at which the matches are logged. The

default setting is two seconds.

ACL matches are not logged for FIRE path or FORE path traffic. For

more information about the slow path and FIRE and FORE paths,

see “Routing Overview” in Chapter 1, “Introduction,” of the Avaya

P550R, P580, P880, and P882 Multiservice Switch User Guide.

This section includes procedures for the following tasks:

■Enabling ACL Logging on page 5

■Setting a Logging Interval on page 7

Enabling ACL Logging

Web Agent

Procedure To enable ACL logging by using the Web Agent:

1. In the navigation pane, expand the Routing > IP >

Configuration folders, and then click Access Lists.

The IP Access List Web page is displayed in the content pane.

See Figure 1.

User Guide Addendum for the Avaya P580 and P882, v5.4

6 December 2, 2002 Part No. 610-0211-094

Figure 1. IP Access List Web page

2. Select the check box next to each rule that you want to

enable ACL logging for.

3. In the Rule Match Logging column, select Enable for each

access rule that you want to enable ACL logging for.

The default setting for ACL logging is disabled.

4. Click Apply.

CLI Command To enable ACL logging, enter Global Configuration mode and use the

following command:

ip acl-logging enable <access-list-name> <rule-number>

The default setting for ACL logging is disabled.

Table 1. Keywords, Arguments, and Options

Keyword, Argument,

or Option Definition

<access-list-name> The access list that contains the access

rule for which you want to enable ACL

logging.

<rule-number> The number of the access rule for which

you want to enable ACL logging.

Doc. No. 650-100-701

Part No. 610-0211-094 December 2, 2002 7

To disable ACL logging, enter Global Configuration mode and use the

following command:

ip acl-logging disable <access-list-name> <rule-number>

Sample Event Log

Entries Figure 2 displays sample ACL matches in the event log.

Figure 2. Sample ACL matches in the event log

Setting a Logging Interval

Web Agent

Procedure To set the interval for ACL logging:

1. In the navigation pane, expand the Routing > IP >

Configuration folders, and then click Access Control.

The IP Access Control Web page is displayed in the content

pane. See Figure 3.

User Guide Addendum for the Avaya P580 and P882, v5.4

8 December 2, 2002 Part No. 610-0211-094

Figure 3. IP Access Control Web page

2. In the Interval between logging of Access Rule Matches

(in seconds) field, enter the interval at which you want ACL

matches logged. Enter an interval from 1 to 60 seconds.

The default setting is 2 seconds.

3. Click Apply.

CLI Command To set the interval for ACL logging, enter Global Configuration mode

and use the following command:

ip acl-logging logging-interval <time-in-seconds>

The default setting is 2 seconds.

Table 2. Keywords, Arguments, and Options

Keyword, Argument,

or Option Definition

<time-in-seconds> The interval at which you want ACL

matches logged. Enter an interval from 1

to 60 seconds.

Doc. No. 650-100-701

Part No. 610-0211-094 December 2, 2002 9

Configuring Custom Access Types

This section contains procedures for the following tasks:

■Creating a Custom Access Type on page 9

■Viewing Custom Access Types on page 13

■Modifying a Custom Access Type on page 14

* Note: To log in to the ATM Uplink module, a user must:

• Have read-write access to the Modules and Ports

Management features.

• Enter Privileged mode or Global Configuration mode to

enter the session <slot number> command.

In earlier versions of application software, you could log

in to the ATM Uplink module from User mode. This

change in functionality prevents unauthorized users from

logging in to the ATM Uplink module.

Creating a Custom Access Type

Web Agent

Procedure To create a custom access type:

1. In the navigation pane, expand the System >

Administration folders, and then click Custom Access

Types.

The Custom Access Types Web page is displayed in the

content pane. See Figure 4.

User Guide Addendum for the Avaya P580 and P882, v5.4

10 December 2, 2002 Part No. 610-0211-094

Figure 4. Custom Access Types Web page

2. On the Custom Access Types Web page, click Create.

The Create Custom Access Type Web page is displayed in the

content pane. See Figure 5.

Autres manuels pour Cajun P580

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Avaya Changer

Avaya

Avaya Cajun P882 Manuel utilisateur

Avaya

Avaya Cajun P550R Comment utiliser

Avaya

Avaya C360 Manager Instructions d'utilisation et d'entretien

Avaya

Avaya 8800 Series Manuel utilisateur

Avaya

Avaya P114F Manuel utilisateur

Avaya

Avaya 5900 Series Manuel utilisateur

Avaya

Avaya P332MF Manuel utilisateur

Avaya

Avaya 2500 Series Manuel du propriétaire

Avaya

Avaya P332GT-ML Manuel de l'opérateur

Avaya

Avaya Cajun P550 Manager 5.1 Mode d’emploi

Avaya

Avaya 8800 Series Manuel utilisateur

Avaya

Avaya Cajun P333T Manuel utilisateur

Avaya

Avaya P133G2 Manuel utilisateur

Avaya

Avaya Virtual Services Platform 9000 Series Manuel utilisateur

Avaya

Avaya P120 SMON Manuel utilisateur

Avaya

Avaya Cajun P580 Manuel utilisateur

Avaya

Avaya M770 Manuel utilisateur

Avaya

Avaya 8600 Manuel utilisateur

Avaya

Avaya Cajun P550R Instructions d'installation et d'utilisation

Avaya

Avaya M770 Manuel utilisateur

Avaya

Avaya Scopia XT5000 Manuel utilisateur

Avaya

Avaya Virtual Services Platform 7000 Series Mode d'emploi

Avaya

Avaya Ethernet Routing Switch 3600 Series Manuel utilisateur

Avaya

Avaya 8800 Series Manuel utilisateur

Manuels Changer populaires d'autres marques

URC

URC Total Control MFS-8 Manuel utilisateur

Azbil

Azbil HPQ-D11 Manuel utilisateur

Sony

Sony DFS-900M Manuel utilisateur

SICK

SICK i17S Manuel utilisateur

F&F

F&F SZR-277 Manuel utilisateur

Shure

Shure UAMS/BK Manuel utilisateur

Dräger

Dräger X-zone Switch Off Manuel utilisateur

Asco

Asco Joucomatic 349 Series Manuel utilisateur

BT Mini Hub Manuel utilisateur

D-Link

D-Link DES-1226G Manuel utilisateur

Johnson Controls

Johnson Controls FS80-C Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuel utilisateur

MicroNet

MicroNet SP1200A Manuel utilisateur

Ruijie

Ruijie RG-PF2920 Series Manuel d'installation et d'exploitation

Altinex

Altinex DA1914SX Manuel utilisateur

MiLAN

MiLAN MIL-SM2401M Manuel utilisateur

RJM

RJM MASTERMIND PBC/6X Manuel utilisateur

Atlas

Atlas MMK-KVM8 Manuel utilisateur