Cisco MDS 9000 Family Fabric Manager User Guide, Release 1.2(1a) (Updated: Sep 25, 2003)
Configuring IP Filters

Table Of Contents

Configuring IP Filters

Creating IP Profiles

Adding IP Filters to Profiles

Associating IP Profiles to Interfaces

Deleting IP Profiles

Deleting IP Filters


Configuring IP Filters


You can use Fabric Manager to configure IP filters and profiles. The general procedure is to create an IP profile, add a filter to the profile, and then associated that profile to one or more interfaces. Filters can only be created if their associated filter profiles already exist in the ProfileTable.

Deleting any profile in the Profile Table will also delete all the associated filters in the FilterTable and cause the state of the associated 'active' filter profile in the ProfileTable to be changed to 'notReady'.

The list below shows the IP Filter tasks you can perform with Fabric Manager. IP Filter is not available from Device Manager.

Creating IP Profiles

Adding IP Filters to Profiles

Associating IP Profiles to Interfaces

Deleting IP Profiles

Deleting IP Filters

Creating IP Profiles

To create an IP profile, perform the following steps.


Step 1 From the Fabric Manager, choose Security > IP Filter from the menu tree.

The information pane of the Fabric Manager displays IP Filter information.

Step 2 Click the Profiles tab.

A list of profiles is displayed.

Step 3 Click the Create Row icon.

The Create Profile dialog box is displayed.

Step 4 Select the switches you want to include inthe profile, by checking the checboxes next to the switch's address.

Step 5 Enter a profile name in the Name field.

Step 6 Click the Create button to create the profile, or click the Close button to close the Create Profile dialog box without creating a profile.

The newly created profile is displayed in the list of profiles.

Step 7 To create additional profiles, repeat Step 6. Otherwise, click the Close button to close the Create Profile dialog box.


Note You can access the field descriptions for the windows or dialog boxes in this procedure in the Reference section of the Fabric Manager or Device Manager help systems.



Adding IP Filters to Profiles

To add an IP filter to a profile, perform the following steps.


Step 1 From the Fabric Manager, choose Security > IP Filter from the menu tree.

The information pane of the Fabric Manager displays IP Filter information.

Step 2 Click the Profiles tab.

A list of switches and associated profiles is displayed.

Step 3 Click on the IP address of the switch to which you want to add a filter.

The Rules button becomes available.

Step 4 Click the Rules button.

The IP Filter Edit dialog box is displayed.

Step 5 Click the Create Row button.

The Create IP Filter dialog box is displayed.

Step 6 Complete the fields in the Create IP Filter dialog box.

Step 7 Click the Create button to create the filter, or click the Close button to close the Create IP Filter dialog box without creating a filter.

The newly created filter is displayed in the list of filters.

Step 8 Repeat Step 7 to create additional filters, or click the Close button to close the Create IP Filter dialog box.

Step 9 Click the Apply Changes button to add the newly created filters to the profile.


Note You can access the field descriptions for the windows or dialog boxes in this procedure in the Reference section of the Fabric Manager or Device Manager help systems.



Associating IP Profiles to Interfaces

To associate the profile to an interface, perform the following steps.


Step 1 From the Fabric Manager, choose Security > IP Filter from the menu tree.

The information pane of the Fabric Manager displays IP Filter information.

Step 2 Click the Interfaces tab.

A list of interfaces and associated profiles is displayed.

Step 3 Click the Create Row icon.

The Create Interface dialog box is displayed.

Step 4 Select the switches you want to include inthe profile, by checking the checboxes next to the switch's address.

Step 5 Enter an interface name in the Name field.

Step 6 Select the profile direction (either inbound or outbound).

Step 7 Enter the profile name in the Profile Name field. (Note, this profile name must already have been created using the Create Profiles dialog. If not, no filters will be enabled until you to go to the Create Profiles dialog and create the profile.

Step 8 Click the Create button to associate the profile, or click the Close button to close the Create Interfaces dialog box without associating a profile.

The newly associated profile is displayed in the list of profiles.

Step 9 Repeat Step 8 to create additional associations, or click the Close button to close the Create Interfaces dialog box.


Note You can access the field descriptions for the windows or dialog boxes in this procedure in the Reference section of the Fabric Manager or Device Manager help systems.



Deleting IP Profiles

To delete an IP profile, perform the following steps.


Step 1 From the Fabric Manager, choose Security > IP Filter from the menu tree.

The information pane of the Fabric Manager displays IP Filter information.

Step 2 Click the Profiles tab.

A list of switches, profile names, and profile types is displayed.

Step 3 Select the row you want to delete. If you want to delete multiple rows, hold down the Shift key while selecting rows.

Step 4 Click the Delete Row icon.

The profiles are deleted.


Note You can access the field descriptions for the windows or dialog boxes in this procedure in the Reference section of the Fabric Manager or Device Manager help systems.



Deleting IP Filters

To delete an IP filter, perform the following steps.


Step 1 From the Fabric Manager, choose Security > IP Filter from the menu tree.

The information pane of the Fabric Manager displays IP Filter information.

Step 2 Click the Interfaces tab.

A list of switches, filters, and profile names is displayed.

Step 3 Select the row you want to delete. If you want to delete multiple rows, hold down the Shift key while selecting rows.

Step 4 Click the Delete Row icon.

The filters are deleted from the profile.


Note You can access the field descriptions for the windows or dialog boxes in this procedure in the Reference section of the Fabric Manager or Device Manager help systems.