Lucent Technologies Cajun P220, Operation Manual

Page: 136 / 335

Configuring IP Routing (Layer 3)
7-10 Cajun P550/P220 Switch Operation Guide
Creating Extended Access Rules
To create extended access rules:
1. In the IP Configuration section of the Web Agent window, click Access Lists .
The IP Access List dialog box opens.
Note: The IP Access List dialog box displays all standard and extended access rules
that have been created. If no rules have been created, the following
statement displays:
No IP Access Rules are currently
configured
.
2. Click Create Extended . The IP Extended Access Rule Creation dialog box opens.
3. Use Table 7-5 to configure your IP access rules to either filter or prioritize traffic:
Table 7-5. IP Extended Access Rule Creation Parameters
Parameter Allows you to specify...
Access List Name An alphanumeric name assigned to the newly-created access
list.
Access Rule Index The sequence number for each new rule you create. Note that
rules may override each other, so review your current
configuration prior to creating new rules for an access list.
Access Type The method of handling incoming datagrams based on the IP
access type you set. Priority levels include:
• Deny/Filter - Allows you to filter out traffic based on the
specified configuration.
• Permit/Fwd pri8 (high) to pri1 (low) - Allows you to
prioritize traffic based on the specified configuration.
• Permit/Fwd with no change in priority - Allows you to
forward traffic with no change in priority.
Source Subnet • Source Address - The IP address of a subnet that is denied
or granted access to the switch.
• Source Wildcard - A range of IP addresses that are denied
or granted access to the switch. Place the number one (1)
in the bit positions you want to ignore.
Destination Subnet • Dest Address - The IP address of a subnet that is denied
or granted access to data from the switch.
• Dest Address Wildcard - A range of IP addresses of
subnets that are denied or granted access to the switch.
Place the number one (1) in the bit positions you want to
ignore.
Protocol ID A protocol ID to be filtered. (For example, ICMP=1, IGMP=2).
A single asterisk (*) indicates all protocols.