170
Access Control List Configuration
Software Configuration Guide, Revision 1.03
if-name
The name of the IP interface to which an access control list profile gets bound
dest-wildcar
A wildcard for the destination address. See src-wildcard.
host dest
The address of a single destination host.
cos
Optional. Specifies that packets matched by this rule belong to a certain Class of
Service (CoS). For detailed description of CoS configuration refer to chapter
“Quality of Service Configuration” later in this guide.
cos-rtp
Optional. Specifies that the rule is intended to filter RTP/RTCP packets. In this
mode you can specify different CoS groups for data packets (even port numbers)
and control packets (odd port numbers). Note: this option is only valid when
protocol UDP is selected.
group
CoS group name.
group-data
CoS group name for RTP data packets. Only valid when the rtp option has been
specified
group-ctrl
CoS group name for RTCP control packets. Only valid when the rtp option has
been specified.
Example: Create TCP, UDP or SCTP Access Control List Entries
Select the access-list profile named WanRx and create the rules for:
Permitting any TCP traffic to host 193.14.2.10 via port 80, and permitting UDP traffic from host
62.1.2.3 to host 193.14.2.11 via any port in the range from 1024 to 2048.
SN(cfg)#
profile acl WanRx
SN(pf-acl)[WanRx]#
permit tcp any host 193.14.2.10 eq 80
SN(pf-acl)[WanRx]#
permit udp host 62.1.2.3 host 193.14.2.11 range
1024 2048
SN(pf-acl)[WanRx]#
exit
SN(cfg)#
19.8 Bind and Unbind an Access Control List Profile to an
IP Interface
The command
use
is used to bind an access control list profile to an IP interface.
Procedure
To bind an access control list profile to incoming packets on an IP interface
Mode
Profile access control list
Command Purpose
Step 1
node
(if-ip)[
if-name
]#use profile acl
name
in
Binds access control list profile
name
to incoming packets on IP
interface
if-name
Where the syntax is:
Keyword Meaning
Summary of Contents for SmartWare R2.00
Page 2: ......