Access Control List Configuration
173
Step 2
node
(ctx-ip)[router]#interface
if-name
Selects IP interface
if-name
for
which access control list profile
shall be debugged
Step 3
node
(if-ip)[
if-name
]#debug acl {in | out} [level]
Enables access control list debug
monitor with a certain debug level
for the selected interface
if-name
Where the syntax is:
Keyword
Meaning
if-name
The name of the IP interface to which an access control list profile gets bound
level
The detail level. Level 0 disables all debug output, level 7 shows all debug output.
in
Specifies that the settings for incoming packets are to be changed.
out
Specifies that the settings for outgoing packets are to be changed.
Example: Debugging Access Control List Profiles
The following example shows how to enable debugging for incoming traffic of access control lists on
interface
wan
. On level 7 all debug output is shown.
SN(cfg)#
context ip router
SN(cfg-ip)[router]#
interface wan
SN(cfg-if)[wan]#
debug acl in 7
The following example enables the debug monitor for access control lists globally.
SN#
debug acl
The following example disables the debug monitor for access control lists globally.
SN#
no debug acl
19.11 Examples
19.11.1 Deny a Specific Subnet
Figure 19-2 shows an example in which a server attached to network 172.16.1.0 shall not be accessible
from outside networks connected to IP interface
lan
of the SmartNode device. Therefore an incoming
filter rule named
Jamming
is defined, which blocks any IP traffic from network 172.16.2.0 and has to
be bound to IP interface
lan
.
Software Configuration Guide, Revision 1.03
Summary of Contents for SmartWare R2.00
Page 2: ......