Blade ICE G8000 manual Example, Configure an Access Control List, Add the ACL to port, exit

RackSwitch G8000 Application Guide

Example 3

Use this configuration to block traffic from a network that is destined for a specific egress port. All traffic that egresses port 6 from the network 100.10.1.0/24 is denied.

1.Configure an Access Control List.

RS G8000		(config)# ip access-list ip extended 1001
RS	G8000	(config-ext-nacl)# deny	ip 100.10.1.0 255.255.255.0 any
RS	G8000	(config-ext-nacl)# exit

2.Add the ACL to port 6.

RS G8000		(config)# interface port 6
RS	G8000	(config-if)#	ip access-group 1001 out
RS	G8000	(config-if)#	exit

Example 4

Use this configuration to block HTTP traffic on a port.

1.Configure an Access Control List.

RS G8000		(config)# access-list ip extended 1002		80
RS	G8000	(config-ext-nacl)# deny	tcp any any eq
RS	G8000	(config-ext-nacl)# exit

2.Add the ACL to a port.

RS G8000		(config)# interface port 12
RS	G8000	(config-if)#	ip access-group 1002 in
RS	G8000	(config-if)#	exit

102 „ Chapter 6: Quality of Service BMD00041, November 2008