• Author : Phillip

 
 

MRU Enforcement

Description MRU (maximum receive unit) enforcement provides the ability to drop frames that exceed a configured threshold on the ingress interface. Platform compatibility DCS-7020 DCS-7280R DCS-7280R2 DCS-7280R3 (Starting in 4.25.1F) DCS-7500R DCS-7500R2 DCS-7500R3 (Starting in 4.25.1F) Change Log 4.25.0F – initial release Support for MRU enforcement on Ethernet, Port-Channel and Sub-interfaces. 4.25.1F Support MRU enforcement on 7280R3 and 7500R3 platforms Support for per-chip MRU drop counter Configuration MRU is configurable per-interface, and can be configured on Ethernet and Port-Channel interfaces. Frames with size greater than the configured MRU value will be dropped on the ingress, and will not be forwarded...
Continue reading →

MRU Enforcement

Description MRU ( maximum receive unit ) enforcement provides the ability to drop giant frames on the ingress interface. Platform compatibility DCS-7020 DCS-7280R DCS-7280R2 DCS-7280R3 ( Starting in 4.25.1F ) DCS-7500R DCS-7500R2 DCS-7500R3 ( Starting in 4.25.1F ) Change Log 4.25.0F – initial release Support for MRU enforcement on Ethernet, Port-Channel and Sub-interfaces. 4.25.1F Support MRU enforcement on 7280R3 and 7500R3 platforms Support for per-chip MRU drop counter Configuration MRU is configurable per-interface, and can be configured on Ethernet and Port-Channel interfaces. Frames with size greater than the configured MRU value will be dropped on the ingress, and will not...
Continue reading →

Sub-interface ACLs with User-Defined Fields

Description This article describes the support for specifying User-Defined Fields (UDF) in Sub-interface ACLs including IPv4 and IPv6 ACL. This feature is an extension of Port ACLs. Please refer to the following TOI for details regarding User-Defined Fields. https://eos.arista.com/eos-4-23-1f/port-acls-with-user-defined-fields/ Platform compatibility DCS-7020R DCS-7280R DCS-7280R2 DCS-7500R DCS-7500R2 Configuration Similar to Port ACLs with User-Defined Fields, TCAM profile must be configured to include UDFs as part of the Sub-interface ACL feature’s key. For examples on how to configure an access-list with UDF, please refer to the previous TOI. https://eos.arista.com/eos-4-23-1f/port-acls-with-user-defined-fields/ IPv4 Sub-interface ACL The following configurations create a new profile based on the...
Continue reading →

Router ACLs with User-Defined Fields

Router ACLs with User-Defined Fields Description This article describes the support for specifying User-Defined Fields (UDF) in Router ACLs including IPv4 and IPv6 ACL. This feature is an extension of Port ACLs. Please refer to the following TOI for details regarding User-Defined Fields. https://eos.arista.com/eos-4-23-1f/port-acls-with-user-defined-fields/ Platform compatibility DCS-7020R DCS-7280R DCS-7280R2 DCS-7280R3  DCS-7500R DCS-7500R2 DCS-7500R3 Configuration Similar to Port ACLs with User-Defined Fields, TCAM profile must be configured to include UDFs as part of the Router ACL feature’s key.   For examples on how to configure an access-list with UDF, please refer to the previous TOI. https://eos.arista.com/eos-4-23-1f/port-acls-with-user-defined-fields/ IPv4 Router ACL The following...
Continue reading →

Port ACLs with User-Defined Fields

Description This article describes the support for specifying User-Defined Fields( UDF ) in Port ACLs including IPv4, IPv6, and MAC ACL. The purpose of the User-Defined Fields feature is to permit or deny packets based on custom offset pattern matching.   User-Defined Fields, or UDFs, are defined as part of an access-list filter and are comprised of an offset, length, pattern match and mask. This describes a single portion of any incoming packet to match the provided value upon.   UDFs may also be defined via aliases. Aliases are a way to save a UDF configuration for reuse in multiple...
Continue reading →

IPv4 ACL DSCP Mask

Description This article describes the support for specifying DSCP mask in IPv4 access-list. DSCP mask can be used to match multiple DSCP values in a single ACL rule. Platform compatibility DCS-7020R DCS-7280E DCS-7280SE DCS-7280R DCS-7280R2 DCS-7280R3 DCS-7500E DCS-7500R DCS-7500R2 DCS-7500R3 Configuration After a DSCP value is configured in an IPv4 ACL rule, users can configure an optional DSCP mask. A bit set to 1 in the mask indicates to ignore the corresponding value bit. A bit set to 0 in the mask indicates to match exactly the corresponding value bit. switch(config)#ip access-list acl1 switch(config-acl-acl1)#permit ip any any dscp af21 0x0F...
Continue reading →

Port ACLs with User-Defined Fields

Description This article describes the support for specifying User-Defined Fields( UDF ) in Port ACLs including IPv4, IPv6, and MAC ACL. The purpose of the User-Defined Fields feature is to permit or deny packets based on custom offset pattern matching. User-Defined Fields, or UDFs, are defined as part of an access-list filter and are comprised of an offset, length, pattern match and mask. This describes a single portion of any incoming packet to match the provided value upon.  UDFs may also be defined via aliases. Aliases are a way to save a UDF configuration for reuse in multiple access-lists and/or...
Continue reading →

Egress Filtered Mirroring

Description This article describes the support for Egress Filtered Mirroring. The user can selectively mirror egress packets based on the permit statements in the configured IPv4 ACL. Platform Compatibility DCS-7020 DCS-7280SE DCS-7500E DCS-7280R DCS-7280R2 DCS-7500R DCS-7500R2 Configuration Unlike Ingress Filtered Mirroring, where the ACL is attached to either the Mirroring Session or the Mirroring Source, Egress Filtered Mirroring is configured using Port Security ACLs.   For details on how to use the Mirroring Features, please refer to the following TOI: https://eos.arista.com/advanced-mirroring-features/   These commands configure Ethernet interface 8 as the destination port for the redirect_1 mirroring session, and Ethernet interface...
Continue reading →

Follow

Get every new post on this blog delivered to your Inbox.

Join other followers: