Ericsson ECN330, User Manual

Page: 169 / 1226

Configuring the ECN330-switch
163
1553-KDU 137 365 Uen D 2006-06-16
Web – Specify the action (that is, Permit or Deny). Specify the source or
destination addresses or both addresses. Select the address type (Any, Host, or
IP). If "Host" is selected, enter a specific address. If "IP" is selected, enter a
subnet address and the mask for an address range. Set any other required
criteria, such as service type, protocol type, or TCP control code. Then click Add.
Figure 57 Configuring Extended IP ACLs
CLI – This example adds three rules:
1. Accept any incoming packets if the source address is in subnet 10.7.1.x. For
example, if the rule is matched; that is, the rule (10.7.1.0 & 255.255.255.0)
equals the masked address (10.7.1.2 & 255.255.255.0), the packet passes
through.
2. Allow TCP packets from class C addresses 192.168.1.0 to any destination
address when set for destination TCP port 80 (that is, HTTP).