Brocade Converged Enhanced Ethernet Administrator's Guide v6.1.2_cee (53-1001258-01, June 2009)

Table Of Contents
10 Converged Enhanced Ethernet Administrator’s Guide
53-1001258-01
Layer 2 Ethernet overview
1
Scheduling—A typical example of scheduling policy (using SP0 and SP1 modes) is where ports
0 through 7 carry inbound traffic, each port has a unique priority level, port 0 has priority 0,
port 1 has priority 1, and so on. All traffic is switched to the same outbound port. When the
traffic rate and frame size of the inbound traffic streams is changed, you should see different
scheduling policy values. In SP0 mode, all ports have WRR scheduling; therefore, the
frames-per-second (FPS) on all ports should be the most balanced. In SP1 mode, priority 7
traffic uses SP; therefore, priority 7 can achieve a higher FPS. Frames from all input ports
should be switched to the output port. Frames from input ports with the same priority level
should be scheduled in a round robin manner to the output port.
When setting the scheduling policy, each priority group that is using WRR scheduling can be
set to use a percentage of the total bandwidth by setting the PG_Percentage parameter.
For detailed information on configuring QoS, see Configuring QoS using the CEE CLI” on page 103.
Access control
Access Control Lists (ACLs) are used for Layer 2 switching security. Standard ACLs inspect the
source address for the inbound and outbound directions. Extended ACLs provide filtering by source
and destination addresses, protocol, port, and TCP flags. ACLs can be applied to the CEE ports or to
VLANs.
ACLs function as follows:
A standard Ethernet ACL configured on a physical port is used to permit or deny frames based
on the source MAC address. The default is to permit all frames.
An extended Ethernet ACL configured on a physical port is used to permit or deny frames
based on the source MAC address, destination MAC address, and EtherType. The default is to
permit all frames.
A standard Ethernet ACL configured on a LAG virtual port is used to permit or deny frames
based on the source MAC address. The default is to permit all frames. LAG ACLs apply to all
ports in the LAG.
An extended Ethernet ACL configured on a LAG virtual port is used to permit or deny frames
based on the source MAC address, destination MAC address, and EtherType. The default is to
permit all frames. LAG ACLs apply to all ports in the LAG.
A standard Ethernet ACL configured on a VLAN is used to permit or deny frames based on the
source MAC address. The default is to permit all frames. VLAN ACLs apply to all ports attached
to the VLAN.
An extended Ethernet ACL configured on a VLAN is used to permit or deny frames based on the
source MAC address, destination MAC address, and EtherType. The default is to permit all
frames. VLAN ACLs apply to all ports attached to the VLAN.
For detailed information on configuring ACLs, see “Configuring ACLs using the CEE CLI” on
page 93.