02.10.2013 Views

FTOS Configuration Guide for the C-Series - Force10 Networks

FTOS Configuration Guide for the C-Series - Force10 Networks

FTOS Configuration Guide for the C-Series - Force10 Networks

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

View an access-list that you applied to an interface using <strong>the</strong> command show ip accounting access-list<br />

from EXEC Privilege mode, as shown in Figure 90.<br />

Figure 90 Configuring Flow-based Monitoring<br />

<strong>Force10</strong>(conf)#monitor session 0<br />

<strong>Force10</strong>(conf-mon-sess-0)#flow-based enable<br />

<strong>Force10</strong>(conf)#ip access-list ext testflow<br />

<strong>Force10</strong>(config-ext-nacl)#seq 5 permit icmp any any count bytes monitor<br />

<strong>Force10</strong>(config-ext-nacl)#seq 10 permit ip 102.1.1.0/24 any count bytes monitor<br />

<strong>Force10</strong>(config-ext-nacl)#seq 15 deny udp any any count bytes<br />

<strong>Force10</strong>(config-ext-nacl)#seq 20 deny tcp any any count bytes<br />

<strong>Force10</strong>(config-ext-nacl)#exit<br />

<strong>Force10</strong>(conf)#interface gig 1/1<br />

<strong>Force10</strong>(conf-if-gi-1/1)#ip access-group testflow in<br />

<strong>Force10</strong>(conf-if-gi-1/1)#show config<br />

!<br />

interface GigabitE<strong>the</strong>rnet 1/1<br />

ip address 10.11.1.254/24<br />

ip access-group testflow in<br />

shutdown<br />

<strong>Force10</strong>(conf-if-gi-1/1)#exit<br />

<strong>Force10</strong>(conf)#do show ip accounting access-list testflow<br />

!<br />

Extended Ingress IP access list testflow on GigabitE<strong>the</strong>rnet 1/1<br />

Total cam count 4<br />

seq 5 permit icmp any any monitor count bytes (0 packets 0 bytes)<br />

seq 10 permit ip 102.1.1.0/24 any monitor count bytes (0 packets 0 bytes)<br />

seq 15 deny udp any any count bytes (0 packets 0 bytes)<br />

seq 20 deny tcp any any count bytes (0 packets 0 bytes)<br />

<strong>Force10</strong>(conf)#do show monitor session 0<br />

SessionID Source Destination Direction Mode Type<br />

--------- ------ ----------- --------- ---- ----<br />

0 Gi 1/1 Gi 1/2 rx interface Flow-based<br />

180 Port Monitoring

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!