Handling traffic by VLAN

The vlan group data has been migrated from UDR to SDR. Global rules for vlan drop, vlan pass, vlan hide, vlan permit, previously set by the legacy CLI command vlan group, have been converted and migrated from UDR to SDR with removal from UDR.

Drop traffic without analysis from a specific VLAN:

fdpi_cli vlan group <id> drop

Dropping traffic with preliminary analysis, but without transferring it to Netflow statistics from a specific VLAN (Used to deal with asymmetric traffic when a site receives a double of traffic from another site. It is necessary to analyze and drop the traffic so that it is not included in the statistics):

fdpi_cli vlan group <id> hide

Passing traffic without any analysis from a specific VLAN:

fdpi_cli vlan group <id> pass

Display existing settings in the UDR:

fdpi_cli vlan group 0 show all

Example output of the command:

fdpi_cli vlan group 0 show all <proto> <vlan> <service-name> <policy> <delay> all 4000 * hide 0 all 4002 * hide 0 all 4003 * hide 0

In this example, you can see that all protocols belonging to VLAN 4000, 4002, 4003 are affected by hide, that is, traffic from one site is duplicated to another site.

Output all properties for a group with a specific id:

fdpi_cli vlan group <id> show all

Here id is the number of the VLAN for which you want to output Service-Name information.

For more information, seeConfiguring Service-Name for VLAN