Alcatel 9000 Podręcznik Użytkownika Pobierz pdf (Strona 504)

100

101

Configuring ACLs Using ACL Manager

page 25-20 OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

Editing the ACLMAN Configuration File

Another method for configuring ACLs involves using a text editor to edit the contents of the ACLMAN

configuration file (aclman.cfg). This file is located in either the /flash/working or /flash/certified direc-

tory in the switch flash file system. The updated ACL configuration is then loaded into the running config-

uration on the next reboot of the switch or when the configure replace command is performed.

The configure replace command is available in the Privileged Exec Mode of the interactive shell. Using

this command triggers a read of the aclman.cfg file while the shell is still active. ACLMAN then replaces

the entire ACLMAN running configuration with the new configuration that was obtained by reading the

entire contents of the updated aclman.cfg file.

Note that any errors encountered when the aclman.cfg file is read by ACLMAN are logged to an

aclman.cfg.1.err file on the switch. If this file already exists, then the error filename number is incre-

mented by a value of one (e.g., aclman.cfg.2.err, aclman.cfg.3.err) for each new error log file that is

created.

Importing ACL Text Files

In addition to using ACLMAN interactive shell commands or editing the aclman.cfg file to configure

common industry ACLs, it is possible to use a text file to update the running configuration. This method

involves entering common industry ACL statements into a text document using a text editor. The text file

must reside in any directory in the switch flash file system.

To apply the contents of an ACL text file to the ACLMAN running configuration, use the import

command in the Privileged Exec Mode of the ACLMAN interactive shell. For example, the following

command imports the contents of the std_acl20 text file:

Aclman#import std_acl20

By default ACLMAN looks in the /flash directory on the switch for the filename specified with the

import command. If the file is in any other directory, specify the path where the text file is located along

with the filename. For example, the following command imports the ext_acl102 file located in the work-

ing directory on the switch:

Aclman#import working/std_acl102

Note that any errors encountered when importing the contents of a text file into the ACLMAN configura-

tion are logged to an aclman.cfg.1.err file on the switch. If this file already exists, then the error filename

number is incremented by a value of one (e.g., aclman.cfg.2.err, aclman.cfg.3.err) for each new error log

file that is created.

Importing ACL statements from a text file updates the ACLMAN running configuration. Use the write

memory command in the Privileged Exec Mode to save the updated running configuration to the

aclman.cfg file. This will add the imported statements to the ACLMAN startup configuration.

Note. Issuing a write memory command is required to preserve the ACLMAN running configuration

across switch reboots.

1 2 ... 499 500 501 502 503 504 505 506 507 508 509 ... 701 702

Komentarze do niniejszej Instrukcji

Brak uwag

Alcatel 9000 Podręcznik Użytkownika Strona 504

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Oprogramowanie Alcatel 9000