Dell>show ip int vlan 58Vlan 58 is up, line protocol is upInternet address is 1.1.49.1/24Broadcast address is 1.1.49.255Address determined by config fileMTU is 1554 bytesInbound access list is not setProxy ARP is enabledSplit Horizon is enabledPoison Reverse is disabledICMP redirects are not sentICMP unreachables are not sentEgress Interface Selection (EIS)EIS allows you to isolate the management and front-end port domains by preventing switch-initiated trafficrouting between the two domains. This feature provides additional security by preventing flooding attacks onfront-end ports.The following protocols support EIS: DNS, FTP, HTTP, IGMP, NTP, RADIUS, SNMP, SSH, Syslog, TACACS,Telnet, and TFTP.When you enable this feature, all management routes (connected, static, and default) are copied to themanagement EIS routing table. Use the management route command to add new management routes tothe default and EIS routing tables. Use the show ip management-eis-route command to view the EISroutes.Important Points to Remember• Deleting a management route removes the route from both the EIS routing table and the default routingtable.• If the management port is down or route lookup fails in the management EIS routing table, the outgoinginterface is selected based on route lookup from the default routing table.• If a route in the EIS table conflicts with a front-end port route, the front-end port route has precedence.• Due to protocol, ARP packets received through the management port create two ARP entries (one forthe lookup in the EIS table and one for the default routing table).Configuring EISEIS is compatible with the following protocols: DNS, FTP, NTP, RADIUS, sFlow, SNMP, SSH, Syslog, TACACS,Telnet, and TFTP.To enable and configure EIS, use the following commands:1 Enter EIS mode.CONFIGURATION modemanagement egress-interface-selection2 Configure which applications uses EIS.Interfaces 508
