Dell 3-DNS Spezifikationen PDF herunterladen (Seite 70)

Chapter 3

3-16

To assign the self IP address to the VLAN group

You can assign a self IP address to the VLAN group using the bigpipe

command, as follows:

b self <ip address> vlan <vlangroup name>

To verify that Layer 2 forwarding is enabled

Layer 2 forwarding is enabled for the VLAN group using the vlan

proxy_forward attribute. This attribute is enabled by default when the

VLAN group is enabled. To verify that proxy forwarding is enabled, type

the following command:

b vlans show

Setting up security for VLANs

You can lock down a VLAN to prevent direct connection to the BIG-IP

through that VLAN. You can override this lockdown for specific services by

enabling the corresponding global variable for that service. For example:

b global open_ssh_port enable

To enable or disable port lockdown using the Configuration

utility

1. In the navigation pane, click Network.

The VLAN screen opens.

2. Click the VLAN name in the list.

The properties screen for that VLAN opens.

3. To enable port lockdown, click a check in the Port Lockdown box.

To disable port lockdown, clear the Port Lockdown check box.

4. Click Done.

To enable or disable port lockdown from the command line

To enable port lockdown, type:

b vlan <vlan_name> port_lockdown enable

To disable port lockdown, type:

b vlan <vlan_name> port_lockdown disable

Setting fail-safe timeouts for VLANs

For redundant BIG-IP pairs, you can enable a failsafe mechanism that will

fail over when loss of traffic is detected on a VLAN, and traffic is not

restored during the fail-over timeout period for that VLAN. You can enable

a fail-safe mechanism to attempt to generate traffic when half the timeout

has elapsed. If the attempt is successful, the fail-over is stopped.

1 2 ... 65 66 67 68 69 70 71 72 73 74 75 ... 425 426

Keine Kommentare

Dell 3-DNS Spezifikationen Seite 70