vport

Use the vport command to configure a GigaSMART virtual port used as an aggregation point for traffic directed to second level maps. Second level maps include an Adaptive Packet Filtering component (gsrule) or a GTP rule (flow-rule).

This command does not apply to GigaVUE TA Series nodes.

The vport command has the following syntax:

vport alias <alias>
   gsgroup <GigaSMART group alias>
   failover-action <vport-bypass | vport-drop | network-bypass | network-drop | network-port-forced-down>
   mode gtp-overlap

If a gsgroup has not been assigned to a vport yet, the vport command has the following syntax:

vport alias <alias>
   gsgroup <GigaSMART group alias>

Refer to the “GigaVUE-OS CLI—Configuration Examples” chapter in this guide for examples.

The following table describes the arguments for the vport command:

Argument

Description

vport alias <alias>

Specifies the alias of the virtual port.

gsgroup <GigaSMART group alias>

Specifies the GigaSMART group associated with the virtual port.

For example:

(config) # vport alias vport1 gsgroup gsgrp5

failover-action <vport-bypass | vport-drop | network-bypass | network-drop | network-port-forced-down>

Specifies a failover action for the virtual port for inline SSL decryption as follows:

● vport-bypass—Specifies that the traffic that was directed to the vport goes via the bypass path.
● vport-drop—Specifies that the traffic that was directed to the vport is dropped.
● network-bypass—Specifies that all traffic coming to the inline network is directed via the bypass path.
● network-drop—Specifies that all traffic coming to the inline network is dropped.
● network-port-forced-down—Specifies that the inline network ports of the inline network are forced to a down state.

The default is vport-bypass.

For example:

(config) # vport alias vport1 failover-action vport-bypass

Note:  To configure the failover-action, first assign a gsgroup to the vport.

mode gtp-overlap

Specifies the GTP overlap mode. This is an optional mode to use with GTP forward listing and GTP flow sampling when multiple copies of a GTP packet need to be sent to more than one tool.

For example:

(config) # vport alias vport1 mode gtp-overlap

Notes: 
● To configure the mode, first assign a gsgroup to the vport.
● When the vport mode is changed from overlap to non-overlap mode, indeterministic behavior will be in the traffic. Hence, it is recommended to do a cluster or chassis reload for the configuration to take effect.

Refer to the “GigaSMART GTP Whitelisting and GTP Flow Sampling” section in the GigaVUE Fabric Management Guide for details.

Related Commands

The following table summarizes other commands related to the vport command:

Task

Command

Configures a vport on a specified GigaSMART group.

(config) # vport alias vport1 gsgroup gsg1

Displays a specified vport.

Note:  The existing 'show vport' command is enhanced to display the 'SVT mode' for the respective inline-ssl app configured through GigaVUE‑FM.

# show vport alias vport1

Displays all vports.

# show vport all

Displays statistics for a specified vport.

 

# show vport stats alias vport1

Displays statistics for all vports.

Note:  When a vport is modified in the first level map and the second level map, only the statistics of the new vport is visible. The statistics of the previous vport cannot be retrieved.

# show vport stats all

Deletes a specified vport.

(config) # no vport alias vport1

Clears the failover action on a specified vport.

(config) # no vport alias vport1 failover-action

Deletes all vports.

(config) # no vport all