Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 446 / 1193

Common Classifiers
Left running head:
Chapter name (automatic)
420
Beta Beta
CLI Configuration Guide
Alcatel-Lucent
T
O
C
ONFIGURE
R
ULES FOR
IP
E
XAMPLE
E
X
1:
The following example configures a IP rule with ‘any any’ and type ‘ftp’:
ALU(config-match-list-test)# ip any any type ftp
E
X
2:
These rules used in the match-list example below, once configured can be applied
to all/any applications just by referencing its name. You need not have to
repeatedly configure the match-list for every application.
ALU(config)# match-list 101
ALU(config-match-list-101)# 1 ip any prefix 10.0.0.0/8 type
ftp
ALU(config-match-list-101)# 2 ip prefix 21.1.1.0/24 host
41.2.2.2
E
X
3:
The power and flexibility of the rulesets can be best seen when the list references
are used, especially in multiple fields, e.g., the following configuration:
ALU(config)# list i1 prefix 10.0.0.0/8 prefix 11.0.0.0/8
ALU(config)# list i2 prefix 20.0.0.0/8 prefix 21.0.0.0/8
ALU(config)# match-list m1
ALU(config-match-list-m1)# 1 ip list i1 list i2 type normal
ALU(config-match-list-m1)# 2 ip list i1 list i2 type rpc
ALU(config-match-list-m1)# 3 ip list i1 list i2 type ftp
ALU(config-match-list-m1)# 4 ip list i1 list i2 type tftp
Command (in Match-list CM) Description
[< 1-65535 >] ip { any | host <source
ip-address> | interface <name> | list
<name> | prefix <source ip-address/
prefix length> } { any | host
<destination ip-address> | interface
<name> | list <name> | prefix
<destination ip-address/prefix
length> } [ dscp { <0-63> | <dscp-
mnemonics> }| fragment | ip-precedence
{ <0-7> | <precedence-mnemonics> }
| length { <1-1500>
|{ eq | ge | gt | le | lt | range < 1-1500 >}}
| tos { <0-15> | <tos-mnemonics> }| type
{ ftp | normal | rpc | sip | tftp }]
This command is used to
configure rules for IP in a match-
list.
You can define a rule with
subnets, host addresses, or
interfaces or list of any of them.