UMN:CLI
User Manual
V8102
252
deny ip 10.12.154.0 0.0.0.255 10.12.202.0 0.0.0.255
ZebOS IP access list sample_ACL
permit 10.55.193.109/24
SWITCH(config)#
7.18.9
Access List ZeBos
access-list zebos
command controls the transmission of packets on an interface and re-
strict contents of routing updates. The switch stops checking the access list after a match
occurs. The priority of an ACL is based on the order in which the access-list command
was configured.
•
If the ACL as “deny” is configured, the label does not advertise to any peer.
•
If the ACL as “no-match” is configured, then it applies the next advert-list and is inter-
preted as continue.
•
If the ACL as “permit” is configured, and there is a peer ACL, then the label advertises
to all peers permitted by the peer ACL.
•
If the ACL as “permit” is configured, but the peer prefix is “none,” then the label adver-
tises to all peers.
To create an access-list (ACL) to filter packets, use the following command.
Command
Mode
Description
access-list zebos WORD
{
deny
|
permit
} {
ip
|
gre
|
igmp
|
pim
|
rsvp
|
ospf
|
vrrp
|
ipcomp
|
any
|
<0-255>}
{
SOURCE_ADDR
|
any
}
{
DESTINATION_ADDR
|
any
}
Global
Specifies a deny or permit statement of the Zebos ex-
tanded ACL with IP addresses.
WORD: access-list name
deny: denies packets if conditions are matched.
permit: permits packets if conditions are matched.
ip: IP packet
gre: Generic Routing Encapsulation packet.
igmp: Internet Group Management Protocol packet
pim: Protocol Independent Multicast packet
rsvp: Resource Reservaion Protocol packet
ospf: Open Shortest Path First packet
vrrp: Virtual Router Redundancy Protocol packet
ipcomp: IP payload compression packet.
any: any protocol packet
0-255: protocol number, instead of a named protocol
SOUR_ADDR:
source
IP
address
to
match
(A.B.C.D/M)
SOUR_ADDR_RANGE: source IP address range to
match (A.B.C.D A.B.C.D)
DES_ADDR: destination IP address to match
(A.B.C.D/M)
DES_ADDR_RANGE: destination IP address range to
match (A.B.C.D A.B.C.D)
access-list zebos WORD
{
deny
|
permit
} {
ip
|
gre
|
igmp
|
pim
|
rsvp
|
ospf
|
vrrp
|
ipcomp
|
any
|
<0-255>}
{
SOUR_ADDR
|
SOUR_ADDR_RANGE
|
any
}
{
DES_ADDR
|
DES_ADDR_RANGE |
any
} {
label
<1-65535>
|
precedence
<0-7> |
tos
{<0-255> |
range
<0-255> <0-
255>}
|
pkt-size
{
lt
<0-65535>
| gt
<0-65535>
|
range
<0-65535> <0-
65535>}
|
fragments | log
|
inter-
face
{
in
|
out
}
[{
tengigabitether-
net IFPORT | gpon IFPORT
|
channelgroup
}
IFPORT
|
vlan
VLANID
}]
i
