Ericsson ECN330, User Manual

Page: 185 / 1226

Configuring the ECN330-switch
179
1553-KDU 137 365 Uen D 2006-06-16
Web – Configure the mask to match the required rules in the IP ingress ACLs.
Set the mask to check for any source or destination address, a specific host
address, or an address range. Include other criteria to search for in the rules,
such as a protocol type or one of the service types. Or use a bitmask to search
for specific protocol port(s) or TCP control code(s). Then click Add.
Figure 65 Configuring an VLAN IP ACL Mask
CLI – The following example creates a mask that checks the protocol field in the
IP header. It matches any source IP addresses, allows destination IP addresses
that match the bitmask 192.168.1.0, and checks for destination port 80.
Console(config-ip-mask-acl)#mask protocol host 192.168.1.0
destination-port 80
Console(config-ip-mask-acl)#