05-26-2016 05:52 AM
This is my first post in the community.
I cam across a Brocade NetIron MLX device and having difficulty in creating object group like in Cisco routers.
We need to make a list of network inside the object group and then assign that object group to extended ACL.
Looking forward for your guidance.
Thanks in advance!
05-26-2016 09:33 AM
Thanks for the information!
I needed that to implement service policy in virtual interface.
I guess that is not supported as well because no rate-limit option inside virtual interface.
Thanks & Regards!
05-29-2016 11:13 PM
AFAIK, rate-limit is supported on both Physical and VE Port.
did you try to set it from / in config mode level -vif- Interface_number ?
I cannot figured out because don't have any MLX or CER plattforms in my LAB.
however would suggest to open a TAC with Brocade to get support how configure the port.
05-29-2016 11:27 PM
Thanks for the help.
No such option as rate-limit shows up while inside ve interface.
However, I can apply rate-limit with phyical interface.
To overcome this, I changed the specific ve to physical interface and now I am facing another problem.
I need to rate-limit to few networks with suppose 20 Mbps and any other hosts to 50 Mbps.
For that, I created two ACLs
ACL Remark: addon
sequence 5 permit ip x.x.x.x/27 any
sequence 10 permit ip y.y.y.y/27 any
sequence 100 deny ip any any
ACL Remark: regular
permit ip any any
How to use them so that I can get the appropriate result, any suggestion will be highly appreciated.
05-29-2016 11:39 PM
as I said in my preview post, unfortunately I cannot figured out the config.
As per my opinion the features should work inside the VE Interface, for this reason I would insist to suggest you to get in touch with Brocade Support.
Additional, I believe - but not sure - in MLX Router some features are only available in 2Gen and 3Gen Interface Module and supported MicroCode Image.
05-31-2016 08:57 AM
I wanted to let you know that I have forwared your post to our "TAC Engaged" team to see if they can help you out. They should be reaching out to you shortly to gather some more information about your system to make sure they get the right help. I encourage you to continue to post in the community and let me know if there is any way I can help. Once your post is resolved, we will make sure to post the resolution back to the community to help other members.
You can find out more about the TAC Engaged program by clicking on the image below.
06-01-2016 01:01 AM
I have emailed to support as well.
I will update here as soon as any solution is received.
Please mask the real IP addresses while positing solutions