traffic for such end-user-originated sessions destined to management port ip1 is handled using the EISroute lookup.Handling of Transit Traffic (Traffic Separation)This is forwarded traffic where destination IP is not an IP address configured in the switch.• Packets received on the management port with destination on the front-end port is dropped.• Packets received on the front-end port with destination on the management port is dropped.• A separate drop counter is incremented for this case. This counter is viewed using the netstatcommand, like all other IP layer counters.Consider a scenario in which ip1 is an address assigned to the management port and ip2 is an addressassigned to any of the front panel port of a switch. End users on the management and front panel portnetworks are connected. In such an environment, traffic received in the management port destined onthe data port network is dropped and traffic received in the front-end port destined on the managementnetwork is dropped.Mapping of Management Applications and Traffic TypeThe following table summarizes the behavior of applications for various types of traffic when themanagement egress interface selection feature is enabled.Table 15. Mapping of Management Applications and Traffic TypeTraffic type /ApplicationtypeSwitch initiated traffic Switch-destined traffic Transit TrafficEISManagementApplicationManagement is thepreferred egress portselected based on routelookup in EIS table. If themanagement port is downor the route lookup fails,packets are dropped.If source TCP/UDP port matches amanagement application and sourceIP address is management port IPaddress, management port is thepreferred egress port selected basedon route lookup in EIS table. Ifmanagement port is down or routelookup fails, packets are droppedTraffic frommanagement portto data port andfrom data port tomanagement portis blockedNon-EISmanagementapplicationFront-end default routewill take higherprecedence overmanagement default routeand SSH session to anunknown destination usesthe front-end default routeonly. No change in theexisting behavior.If source TCP/UDP port matches amanagement application and thesource IP address is a managementport IP address, the managementport is the preferred egress portselected based on route lookup inEIS table. If the management port isdown or the route lookup fails,packets are droppedTraffic frommanagement portto data port andfrom data port tomanagement portis blocked• EIS is enabled implies that EIS feature is enabled and the application might or might not be configuredas a management application• EIS is disabled implies that either EIS feature itself is disabled or that the application is not configuredas a management applicationTransit TrafficInternet Group Management Protocol (IGMP) 311
