Overview
14-6
•
Select icmp to allow/deny icmp packets. Selecting icmp provides the option of filtering icmp packets
based on icmp type and code.
Example
The following example denies traffic between two subnets:
RFS7000(config-ext-nacl)#deny
ip
192.168.2.0/24 192.168.1.0/24
RFS7000(config-ext-nacl)#permit ip any any
RFS7000(config-ext-nacl)#
The following example denies tcp traffic with source port range between 20 - 23 from the source subnet to
destination sub net:
RFS7000(config-ext-nacl)#deny
tcp
192.168.1.0/24 192.168.2.0/24 range 20 23
RFS7000(config-ext-nacl)#permit ip any any
RFS7000(config-ext-nacl)#
The following example denies udp traffic with a source port range between 20 - 23 from the source subnet to
destination sub net.
RFS7000(config-ext-nacl)#deny
udp
192.168.1.0/24 192.168.2.0/24 range 20 23
RFS7000(config-ext-nacl)#permit ip any any
RFS7000(config-ext-nacl)#
The following example denies icmp traffic from any source to any destination. The keyword
any
is used to
match any source or destination IP address.
RFS7000(config-ext-nacl)#deny
icmp
any any
RFS7000(config-ext-nacl)#permit ip any any
RFS7000(config-ext-nacl)#
NOTE
The log option is functional only for router ACL’s. The log option displays an
informational logging message for the packet that matches the entry sent to the
console.
Содержание RFS7000 Series
Страница 1: ... RFS7000 Series RF Switch CLI Reference Guide ...
Страница 10: ...x RFS7000 Series CLI Reference Guide ...
Страница 30: ...Overview 1 10 ...
Страница 150: ...Overview 3 16 RFS7000 show management Mgmt Interface vlan1 Management access permitted via any vlan interface RFS7000 ...
Страница 196: ...Overview 4 46 ...
Страница 270: ...Overview 5 74 ...
Страница 284: ...Overview 6 14 ...
Страница 294: ...Overview 7 10 ...
Страница 304: ...Overview 8 10 ...
Страница 308: ...Overview 9 4 ...
Страница 338: ...Overview 11 36 ...
Страница 366: ...Overview 12 28 ...
Страница 380: ...Overview 13 14 ...
Страница 404: ...Overview 15 2 terminal Sets terminal line parameters page 15 14 Command Description Ref ...
Страница 434: ...Overview 16 18 ...
Страница 466: ...Overview 17 32 ...
Страница 474: ...Overview 18 8 ...
Страница 504: ...Overview 19 30 ...
Страница 572: ...Overview 20 68 ...
Страница 581: ...21 9 new show alarm log count all new acknowledged severity to limit 1 65535 RFS7000 config sole ...
Страница 584: ...Overview 21 12 ...
Страница 586: ...A 2 RFS7000 Series CLI Reference Guide ...
Страница 587: ......
Страница 588: ...MOTOROLA INC 1303 E ALGONQUIN ROAD SCHAUMBURG IL 60196 http www motorola com 72E 103891 01 Revision A January 2008 ...