Alcatel 9000 Guía de usuario descargar pdf (Pagina 490)

100

101

ACLMAN Overview Using ACL Manager

page 25-6 OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

ACL Text Files

ACLMAN supports the importing of common industry ACL statements created and saved to a file using a

text editor. The import command in the Privileged Exec Mode of the ACLMAN shell triggers ACLMAN

to read the specified text file and load the ACL statements into the running configuration. These same

statements also become part of the ACLMAN startup configuration when a write memory command is

performed.

Note that the write memory command triggers ACLMAN to save the running configuration to the

aclman.cfg file. It is not possible to direct ACLMAN to write to any other file. Other text files are only

read by ACLMAN and are never used to export information from the ACLMAN configuration.

ACL statements imported from a text file are treated the same way as statements entered directly through

the ACLMAN interactive shell. For more information about importing ACL text files, see “Importing

ACL Text Files” on page 25-21.

ACL Precedence

ACLMAN allows a user to apply common industry ACLs to an Alcatel switch. When these ACLs are

created using ACLMAN configuration tools, they are automatically assigned an Alcatel QoS internal

priority of 101.

Alcatel CLI/SNMP policies are assigned a priority of one by default. As a result, ACLMAN policies will

take precedence over Alcatel CLI/SNMP policies unless the Alcatel policies are configured with a prece-

dence value higher than 101.

QoS policies configured through LDAP are given a value in the range 30000 to 65535. Therefore LDAP

policies take precedence over ACLMAN policies.

Interaction With the Alcatel CLI

ACLMAN is invoked using the aclman CLI command. Once the ACLMAN interactive shell interface is

active, no other Alcatel CLI commands are accepted. All ACLMAN configuration is performed using

commands specific to the shell interface. For more information, see “Using the ACLMAN Shell” on

page 25-7.

QOS policies configured through ACLMAN are visible through the AOS CLI using the show policy

commands. Note that ACLMAN policies that are not applied to a switch interface are not yet active on the

switch and will not appear in a CLI show command output display.

The ACLMAN show commands only display ACLMAN configuration information. There is no

ACLMAN command at this time that displays Alcatel CLI policy configurations.

When the Alcatel CLI configuration snapshot command is used to save the switch configuration to an

ASCII text file, ACLMAN configured policies are not included. It is possible, however, to create text files

containing supported ACL syntax and import the contents of the file into the ACLMAN running configu-

ration. See “Importing ACL Text Files” on page 25-21 for more information.

1 2 ... 485 486 487 488 489 490 491 492 493 494 495 ... 701 702

Comentarios a estos manuales

Sin comentarios

Alcatel 9000 Guía de usuario Pagina 490

Comentarios a estos manuales

Relacionado con productos y manuales para Software Alcatel 9000