7-43
ATM Switch Router Software Configuration Guide
OL-7396-01
Chapter 7
Configuring Virtual Connections
Configuring Access Filters on Soft PVC and Soft PVP Passive Connections
The access filters for soft PVC and soft PVP passive connections feature uses the
access-control
parameter, to restrict access to the passive destination side of the soft PVC or soft PVP based on the
source interface NSAP address of the connection and time of day.
You configure a filter set using the
atm filter-set
command on the passive soft PVC or soft PVP side.
Configuring a filter set gives you the added flexibility to allow multiple NSAP addresses to access the
passive destination side of the soft PVC or soft PVP and limit the time of day when to allow access. The
examples later in this section show access control configured using both source ATM address and filter
set configurations.
Configuring Access Filters on Soft PVC Passive Connections
To configure a access filters on a two-ended soft PVC passive connection, follow these steps:
.
Examples
Using a source address —
The following example shows the configuration of the two-ended soft PVC
(shown in
Figure 7-8
) with access control configured using a source address on the passive half leg. Start
with the configuration of Switch-C.
Switch-C(config)#
interface atm atm 0/0/1
Switch-C(config-if)#
atm soft-vc 1 60 passive access-control src-address
47.0091.8100.0000.0010.073c.0101.4000.0c80.9030.00
Switch-C(config-if)#
end
Switch-C#
On Switch-B, create a two-ended soft PVC on the source switch that uses the passive half leg on the
terminating switch.
Switch-B(config)#
interface atm 3/0/1
Switch-B(config-if)#
atm soft-vc 0 50 dest-address
47.0091.8100.0000.0001.4204.d801.4000.0c85.8000.00 1 60
Command
Purpose
Step 1
Switch-C(config)#
atm filter-set
name
[
index
[
number
]] [
permit
|
deny
] [
template
|
time-of-day
{
anytime
|
start-time
{
end-time
}}]
(Optional) Used to configure the
access-control
filter-set
parameter in on the passive
destination-side of the soft VC.
Step 2
Switch-C(config)#
interface atm
card
/
subcard
/
port
Switch-C(config-if)#
Selects the interface, on the terminating switch,
being configured.
Step 3
Switch-C(config-if)#
atm soft-vc
dest-vpi
dest-vci
passive
[
pd
pd
] [
upc
upc
] [
rx-cttr
index
]
[
tx-cttr
index
] [
access-control
{
src-address
atm-address
|
filter-set
name
}]
Configures the passive leg on the terminating
switch interface.
Step 4
Switch-B(config-if)#
atm soft-vc
source-vpi
source-vci
dest-address
atm-address dest-vpi
dest-vci
[
enable | disable
] [
upc
upc
] [
pd
pd
]
[
rx-cttr
index
] [
tx-cttr
index
] [
retry-interval
[
first
retry-interval
] [
maximum
retry-interval
]]
Creates a two-ended soft PVC on the source
switch that uses the passive half leg on the
terminating switch.
Step 5
Switch-C(config-if)#
end
Switches to EXEC command mode.
Step 6
Switch-C#
show atm vc interface atm
card/subcard/port vpi vci
Displays the passive half-leg configuration
information of two-ended soft PVC.
