Policy

 

 

 

 

 

Table 20-3. Sample Extended ACL Rules

 

 

 

 

To . . . Continued

Enter . . .

 

 

 

 

Use the DSCP in the packet to

access-list MyAccessList2 2 permit use-

 

classify all traffic that has a:

diffserv mask ip 3.0.0.0 0.255.255.255

 

• Source IP address in the 3.0 subnet

5.0.0.0 0.255.255.255

 

 

 

 

 

• Destination address in the 5.0

 

 

 

subnet

 

 

 

• Mask the three least significant bits

 

 

 

of the DSCP

 

 

 

 

 

 

Assign a priority of 2 to all TCP

access-list MyAccessList2 3 permit use-

 

traffic that has a:

priority 2 tcp 1.1.0.0 0.0.255.255 gt 24

 

• Source IP address in the 1.1 subnet

6.6.0.0 0.0.255.255 eq 23

 

 

 

 

• Source port that is greater than 24

 

 

 

• Destination IP address in the 6.6

 

 

 

subnet

 

 

 

• Destination port of 23

 

 

 

 

 

 

• Replace the existing DSCP of

access-list MyAccessList2 4 permit

 

packets with a DSCP of 12 for all

remark l2 mask ip host 199.93.238.83

 

traffic that has a source IP address

any

 

of 199.93.238.83.

 

 

 

• Mask the three least significant bits

 

 

 

of the DSCP.

 

 

 

 

 

 

Replace the existing DSCP of the

access-list MyAccessList2 5 permit

 

packet with a DSCP of 24 for all

remark-diffserv 24 icmp host 2.2.2.2 host

 

ICMP traffic that has a:

4.4.4.4

 

 

• Source IP address of 2.2.2.2

 

 

 

• Destination IP address of 4.4.4.4

 

 

 

 

 

 

Assign a priority of 6 to all TCP

access-list MyAccessList2 6 permit use-

 

traffic that has a:

priority 6 tcp 10.10.10.0 0.0.0.255

 

• Source IP address in the 10.10.10

11.11.11.0 0.0.0.255 eq 1

 

 

 

 

subnet

 

 

 

• Destination IP address in the

 

 

 

11.11.11 subnet

 

 

 

• Destination port of 1

 

 

 

 

 

 

Use the layer 2 priority in the packet

access-list MyAccessList2 7 permit use-

 

to classify all UDP traffic

l2 udp any any

 

 

 

 

 

2 of 3

 

 

 

 

Document No. 10-300090, Issue 1

20-7

Page 421
Image 421
Avaya 106760804 manual Document No -300090, Issue 20-7