Configuration Guide User guide

FastIron Configuration Guide xxv
53-1002494-02
Chapter 24 MAC-based VLANs
MAC-based VLAN overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .905
Static and dynamic hosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . .905
MAC-based VLAN feature structure . . . . . . . . . . . . . . . . . . . . .906
Dynamic MAC-based VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .907
Configuration notes and feature limitations
for dynamic MAC-based VLAN. . . . . . . . . . . . . . . . . . . . . . . . . .907
Dynamic MAC-based VLAN CLI commands . . . . . . . . . . . . . . .907
Dynamic MAC-based VLAN configuration example . . . . . . . . .908
MAC-based VLAN configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . .909
Using MAC-based VLANs and 802.1X security
on the same port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .910
Configuring generic and Brocade vendor-specific
attributes on the RADIUS server . . . . . . . . . . . . . . . . . . . . . . . .910
Aging for MAC-based VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . .911
Disabling aging for MAC-based VLAN sessions . . . . . . . . . . . .912
Configuring the maximum MAC addresses per port . . . . . . . .913
Configuring a MAC-based VLAN for a static host . . . . . . . . . . .913
Configuring MAC-based VLAN for a dynamic host . . . . . . . . . .914
Configuring dynamic MAC-based VLAN . . . . . . . . . . . . . . . . . .914
Configuring MAC-based VLANs using SNMP . . . . . . . . . . . . . . . . . .915
Displaying Information about MAC-based VLANs . . . . . . . . . . . . . .915
Displaying the MAC-VLAN table. . . . . . . . . . . . . . . . . . . . . . . . .915
Displaying the MAC-VLAN table for a specific MAC address . .916
Displaying allowed MAC addresses . . . . . . . . . . . . . . . . . . . . .916
Displaying denied MAC addresses . . . . . . . . . . . . . . . . . . . . . .917
Displaying detailed MAC-VLAN data . . . . . . . . . . . . . . . . . . . . .918
Displaying MAC-VLAN information for a specific interface . . .919
Displaying MAC addresses in a MAC-based VLAN . . . . . . . . . .920
Displaying MAC-based VLAN logging . . . . . . . . . . . . . . . . . . . .921
Clearing MAC-VLAN information. . . . . . . . . . . . . . . . . . . . . . . . . . . .921
Sample MAC-based VLAN application . . . . . . . . . . . . . . . . . . . . . . .921
Chapter 25 Port mirroring and Monitoring
Port mirroring and monitoring overview . . . . . . . . . . . . . . . . . . . . .925
Port mirroring and monitoring configuration. . . . . . . . . . . . . . . . . .927
Configuration notes for port mirroring and monitoring . . . . . .927
Command syntax for port mirroring and monitoring . . . . . . . .929
mirroring configuration on an IronStack . . . . . . . . . . . . . . . . . . . . .930
Configuration notes for Ironstack mirroring . . . . . . . . . . . . . . .930
ACL-based inbound mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .931
Creating an ACL-based inbound mirror clause for
FWS and FCX devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .931
ACL-based inbound mirror clauses for
FastIron X Series devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . .932
Destination mirror port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .932