Inalp Networks SmartWare Release 2.10, Software Configuration Manual, Page: 164 / 357

164 Access Control List Configuration
Software Configuration Guide Release 2.10, Revision 1.00
type code code ] [ cos group ] options
Keyword Meaning
src The source address to be included in the rule. An IP address in dotted-decimal-
format, e.g. 64.231.1.10.
src-wildcard A wildcard for the source address. Expressed in dotted-decimal format this value
specifies which bits are significant for matching. One-bits in the wildcard indicate
that the corresponding bits are ignored. An example for a valid wildcard is
0.0.0.255, which specifies a class C network.
any Indicates that IP traffic to or from all IP addresses is to be included in the rule.
host src The address of a single source host.
dest The destination address to be included in the rule. An IP address in dotted-
decimal-format, e.g. 64.231.1.10.
dest-wildcard A wildcard for the destination address. See src-wildcard
host dest The address of a single destination host.
cos Optional. Specifies that packets matched by this rule belong to a certain Class of
Service (CoS). For detailed description of CoS configuration refer to chapter
“Quality of Service Configuration” later in this guide.
group CoS group name.
If you place a
deny ip any any rule at the top of an access control list profile, no packets will pass
regardless of the other rules you defined.
Example: Create IP Access Control List Entries
Select the access-list profile named WanRx and create some filter rules for it.
SN(cfg)# profile acl WanRx
SN(pf-acl)[WanRx]# permit ip host 62.1.2.3 host 193.14.2.11 cos Urgent
SN(pf-acl)[WanRx]# permit ip 62.1.2.3 0.0.255.255 host 193.14.2.11
SN(pf-acl)[WanRx]# permit ip 97.123.111.0 0.0.0.255 host 193.14.2.11
SN(pf-acl)[WanRx]# deny ip any any
SN(pf-acl)[WanRx]# exit
SN(cfg)#
19.6 Add an ICMP Filter Rule to the Current Access
Control List Profile
The command permit or deny are used to define an ICMP filter rule. Each ICMP filter rule
represents an ICMP access of control list entry.
Procedure
To create an ICMP access control list entry that permits access
Mode
Profile access control list
Command Purpose
Step 1
node (pf-acl)[ name ]#permit icmp { src src-
wildcard | any | host src } { dest dest-wildcard |
any | host dest } [msg name | type type | type
Creates an ICMP access of control
list entry that permits access
defined according to the command