Enabling forwarding of IP directed broadcasts (CLI)

For more information, see Configuring forwarding parameters.

HP Switch(config)# ip directed-broadcast

Syntax:

[no] ip directed-broadcast

HPE software makes the forwarding decision based on the routing switch's knowledge of the destination network prefix. Routers cannot determine that a message is unicast or directed broadcast apart from the destination network prefix. The decision to forward or not forward the message is by definition only possible in the last-hop router.

Introduction to feature

Wake-on-LAN (WOL) is an Ethernet computer networking standard that allows a computer to be turned on or awakened by a network message. The message is sent by a program executed on the same local area network. Messages can also be initiated from another network by using subnet directed broadcasts or a WOL gateway service. WOL is implemented using specially designed packet called magic packet. WOL is enabled on the switch by using a ip directed-broadcast command with an IPv4 configuration, which can be used to specify an access-list name, thus avoiding unnecessary administrative overhead.

IP directed-broadcasts would only be forwarded if permitted by the associated access-list. An implicit deny at the end of an access list drops all IP directed-broadcasts that are not authorized according to the access list entries.


[NOTE: ]

NOTE: IP routing must be enabled on the switch for this feature to work.


CLI commands

The optional association of access-list with IP directed-broadcast allows user to filter directed broadcast traffic alone based on access-list entry rule. The feature’s CLI includes an optional parameter to specify access-list name along with the already existing “ip directed-broadcast” command. The access-list rule specified is applied globally on the switch and is not specific to any vlan’s alone. There is an Implicit Deny at the end of an access list that will drop all IP Directed Broadcasts that do not match any of the access list entries.

Configuration commands

Enable IP directed broadcast forwarding for Wake-on-LAN support. An optional ACL can also be applied to control what packets are forwarded.

Syntax

HPN Switch(config)# ip directed-broadcast [access-group <ACL-ID>]

access-group

Apply the specified access control list.

access-list-name-str

ASCII string specifying an ACL

Example configuration

HPN Switch(config)# ip directed-broadcast [access-group] <wol-acl>

<wol-acl> entries

ip access-list extended <wol-acl> 
10 permit ip 192.168.1.1 255.255.255.0 182.168.1.1 55.255.255.0
20 deny ip 172.168.1.1 255.255.255.0 162.168.1.1 255.255.255.0
Exit

Example running configuration

; J9573A Configuration Editor; Created on release #KA.15.18.0000x
; Ver #06:7c.fd.ff.ff.3f.ef:57
hostname "HP-3800-24G-PoEP-2SFPP"
module 1 type j9573x
ip access-list extended "wol-acl"
....10 permit ip 192.168.1.10 0.0.0.0 182.168.1.1 0.0.0.255
....exit

ip directed-broadcast access-group "wol-acl"
ip routing
snmp-server community "public" unrestricted
oobm
....ip address dhcp-bootp
    exit
vlan 1
....name "DEFAULT_VLAN"
....no untagged 1,23-24
....untagged 2-22,25-26
....ip address dhcp-bootp
....exit
vlan 10
....name "VLAN10"
....untagged 1
....ip address 192.168.1.1 255.255.255.0
....exit
vlan 20
....name "VLAN20"
....untagged 23-24
....ip address 182.168.1.1 255.255.255.0
....exit

Configuration diagram

Configuration diagram

[NOTE: ]

NOTE:

  • If specified ACL ID is non-existing, it is not possible to associate with IP Directed Broadcast. An error will be shown to the user.

  • It is not allowed to delete an ACL which is associated with IP Directed Broadcast and on attempt, an error message will be shown to user.

  • The same ACL wol-acl can be applied to any other interface like VLAN, port and tunnel.




Show commands

IP directed broadcast hit counts for the associated access-list with can be displayed using the show command.

Show statistics

Show IPV4 ACL Statistics.

Syntax

HPN Switch # show statistics aclv4 <acl-id>

Options
port <port>
vlan <vlan-id> vlan
ip-directed-broadcast

[NOTE: ]

NOTE: Please note that the existing help text of all other parameters listed other than newly added ip-directed-broadcast will remain the same.


Syntax

show statistics aclv4 <acl-name-str>

ip-directed-broadcast

Show Statistics for the IP Directed Broadcast ACL.

HPN Switch # show statistics aclv4 wol-acl ip-directed-broadcast
HitCounts for ip-directed-broadcast ACL wol-acl 
Total 
(       0 )    10 permit ip 192.168.1.1 255.255.255.0 182.168.1.1 55.255.255.0
(       0 )    20 deny ip 172.168.1.1 255.255.255.0 162.168.1.1 255.255.255.0

Clear command

The hit count statistics for ACL on IP directed broadcast can be cleared using clear command.

Syntax

clear statistics aclv4 <acl-id>

Options
port <port>
vlan <vlan-id> vlan
<ip-directed-broadcast>

Reset IPV4 Statistics.


[NOTE: ]

NOTE: Please note that the existing help text of all other parameters listed other than newly added ip-directed-broadcast will remain the same.


Syntax

clear statistics aclv4 <acl-name-str>

ip-directed-broadcast Clear Statistics for the IP Directed Broadcast ACL.

show access-list command

The existing “show access-list” command will have the following modification to support ip- directed-broadcast.

Syntax

show access-list

Options
<ACL-ID> [config]
<config>
<ip-directed-broadcast>
ports <<PORT-LIST>>
<radius>
<resources>

Show Access Control List Information.


[NOTE: ]

NOTE: Please note that the existing help of all other parameters listed other than newly added ip-directed-broadcast will remain the same.


Show ACL’s applied to IP Directed Broadcast traffic

show access-list <ip-directed-broadcast>

HPN Switch # show access-list ip-directed-broadcast

Access Lists for IP Directed Broadcast
IPv4                   : wol-acl   Type: Extended

If user uses already existing show access-list <ACL_NAME-STR> command, the status of ACL on IP Directed Broadcast will be shown applied as in this example below.

HPN Switch # sh access-list wol-acl
Access Control Lists
.......Name: wol-acl
 ......Type: Extended
.......Applied: Yes
.......SEQ  Entry
-----------------------------------------------------------------------------
10  .Action: permit
 ......Src IP: 192.168.1.1       Mask: 255.255.255.0     Port(s):
.......Dst IP: 182.168.1.1       Mask: 55.255.255.0      Port(s):
.......Proto : IP
 ......TOS   : -                 Precedence: -
20  Action: deny
.......Src IP: 172.168.1.1       Mask: 255.255.255.0     Port(s):
.......Dst IP: 162.168.1.1       Mask: 255.255.255.0     Port(s):
 ......Proto : IP
 ......TOS   : -                 Precedence: -

MIB

MIB object hpicfDBroadcastFwdAcl stores the access-list name associated with IP directed broadcast.

  • hpicfDBroadcastFwdEnable OBJECT-TYPE

    Syntax integer

    • enabled (1)

    • disabled (2)

    • MAX-ACCESS read-write

    • STATUS current

    Used to enable/disable IP directed broadcast feature on the device. When set to disable, hpicfDBroadcastFwdAcl is also cleared.

  • hpicfDBroadcastFwdAcl OBJECT-TYPE

Syntax integer

  • SnmpAdminString (SIZE (1..64))

  • MAX-ACCESS read-write

  • STATUS current

Used to store the access-list name associated with the IP Directed Broadcast feature. This is a printable string up to 64 characters in size and case sensitive. An empty string indicates that no access-list is associated with the IP directed broadcast feature. This object can be configured only when the value of the object hpicfDBroadcastFwdEnable is set to enable.

Disabling the directed broadcasts

HP Switch(config)# no ip directed-broadcast