Chapter 23

Table 23-2. Examples: Standard ACL Rules

To. . .

Enter. . .

 

 

• Use the DSCP in the packet to

(configure)# access-list

classify all traffic that has a source

MyAccessList1 9 permit use-

IP address of 3.3.3.3

diffserv mask host 3.3.3.3

• Mask the three least significant bits

 

of the DSCP

 

 

 

Assign a priority of 2 to all traffic that

(configure)# access-list

has a source IP address of 1.1.1.1

MyAccessList1 10 permit use-

 

priority 2 1.1.1.1

 

 

Block all traffic that has a source IP

(configure)# access-list

address of 10.1.0.55

MyAccessList1 11 deny 10.1.0.55

 

 

 

2 of 2

 

 

Sample Output: The following table provides examples of extended ACL rules.

Extended ACL

Rules

Table 23-3. Examples: Extended ACL Rules

To. . .

Enter. . .

 

 

Use the DSCP in the packet to classify

(configure)# access-list

all traffic that has a:

MyAcessList2 1 permit use-diffserv

• Source IP address of 199.93.239.168

ip host 199.93.239.168 1.1.1.0

0.0.0.255

• Destination address in the 1.1.1

 

subnet

 

 

 

Use the DSCP in the packet to classify

(configure)# access-list

all traffic that has a:

MyAccessList2 2 permit use-

• Source IP address in the 3.0 subnet

diffserv mask ip 3.0.0.0

0.255.255.255 5.0.0.0 0.255.255.255

• Destination address in the 5.0 subnet

 

• Mask the three least significant bits

 

of the DSCP

 

 

 

Assign a priority of 2 to all TCP traffic

(configure)# access-list

that has a:

MyAccessList2 3 permit use-

• Source IP address in the 1.1 subnet

priority 2 tcp 1.1.0.0 0.0.255.255 gt

24 6.6.0.0 0.0.255.255 eq 23

• Source port that is greater than 24

 

• Destination IP address in the 6.6

 

subnet

 

• Destination port of 23

 

 

 

 

1 of 3

 

 

23-6

Command Reference Guide for the Avaya P580 and P882 Multiservice Switches, v6.1

Page 494
Image 494
Avaya 106760804 manual Examples Extended ACL Rules, Diffserv mask host