IBM RackSwitch G8000, Application Manual

Page: 89 / 362

© Copyright IBM Corp. 2011 Chapter 7. Access Control Lists
87
ACL Example 4
Use this configuration to deny all ARP packets that ingress a port.
1. Configure an Access Control List.
2. Add ACL 2 to port EXT2.
ACL Example 5
Use the following configuration to permit access to hosts with destination MAC
address that matches 11:05:00:10:00:00 FF:F5:FF:FF:FF:FF and deny access to all
other hosts.
1. Configure Access Control Lists.
2. Add ACLs to a port.
ACL Example 6
This configuration blocks traffic from a network that is destined for a specific egress
port. All traffic that ingresses port 1 from the network 100.10.1.0/24 and is destined
for port 3 is denied.
1. Configure an Access Control List.
2. Add ACL 4 to port 1.
RS G8000(config)# access-control list 2 ethernet ethernet-type arp
RS G8000(config)# access-control list 2 action deny
RS G8000(config)#
interface port 2
RS G8000(config-if)#
access-control list 2
RS G8000(config-if)#
exit
RS G8000(config)# access-control list 30 ethernet
destination-mac-address
11:05:00:10:00:00 FF:F5:FF:FF:FF:FF
RS G8000(config)# access-control list 30 action permit
RS G8000(config)# access-control list 100 ethernet
destination-mac-address
00:00:00:00:00:00 00:00:00:00:00:00
RS G8000(config)# access-control list 100 action deny
RS G8000(config)#
interface port 2
RS G8000(config-if)#
access-control list 30
RS G8000(config-if)#
access-control list 100
RS G8000(config-if)#
exit
RS G8000(config)#
access-control list 4
ipv4 source-ip-address
100.10.1.0 255.255.255.0
RS G8000(config)#
access-control list 4
egress-port 3
RS G8000(config)# access-control list 4 action deny
RS G8000(config)#
interface port 1
RS G8000(config-if)#
access-control list 4
RS G8000(config-if)#
exit