Extreme Networks ExtremeWare XOS 11.1, Руководство пользователя

Страница: 190 / 496

Policies and ACLs
ExtremeWare XOS 11.1 Concepts Guide
190
source-address 10.203.134.0/24;
protocol TCP;
source-port > 190;
tcp-flags syn_ack;
} then {
permit;
count tcpcnt ;
qosprofile qp3;
}
}
The following example denies ICMP echo request packets from the 10.203.134.0/24 subnet, and
increments the counter
icmpcnt :
entry icmp {
if {
source-address 10.203.134.0/24;
protocol icmp;
icmp-type echo-request;
} then {
deny;
count icmpcnt;
}
}
The following entry denies every packet and increments the counter default :
entry default {
if {
} then {
deny;
count default;
}
}
Displaying and Clearing ACL Counters
To display the ACL counters, use the following command:
show access-list counter {<countername>} {any | ports <portlist> | vlan <vlanname>}
{ingress}
To clear the access list counters, use the following command:
clear access-list counter {<countername>} {any | ports <portlist> | vlan <vlanname>}
{ingress}
Routing Policies
Routing policies are used to control the advertisement or recognition of routes using routing protocols,
such as Routing Information Protocol (RIP), Open Shortest Path First (OSPF), or Border Gateway
Protocol (BGP). Routing policies can be used to “hide” entire networks or to trust only specific sources
for routes or ranges of routes. The capabilities of routing policies are specific to the type of routing