7-43
ATM Switch Router Software Configuration Guide
OL-7396-01
Chapter7 Configuring Virtual Connections
Configuring Access Filters on Soft PVC and Soft PVP Passive Connections
The access filters for soft PVC and soft PVP passive connections feature uses the access-control
parameter, to restrict access to the passive destination side of the soft PVC or soft PVP based on the
source interface NSAP address of the connection and time of day.
You configure a filter set using the atm filter-set command on the passive soft PVC or soft PVP side.
Configuring a filter set gives you the added flexibility to allow multiple NSAP addresses to access the
passive destination side of the soft PVC or soft PVP and limit the time of day when to allow access. The
examples later in this section show access control configured using both source ATM address and filter
set configurations.
Configuring Access Filters on Soft PVC Passive Connections
To configure a access filters on a two-ended soft PVC passive connection, follow these steps:
.
Examples
Using a source address — The following example shows the configuration of the two-ended soft PVC
(shown in Figure 7-8) with access control configured using a source address on the passive half leg. Start
with the configuration of Switch-C.
Switch-C(config)# interface atm atm 0/0/1
Switch-C(config-if)# atm soft-vc 1 60 passive access-control src-address
47.0091.8100.0000.0010.073c.0101.4000.0c80.9030.00
Switch-C(config-if)# end
Switch-C#
On Switch-B, create a two-ended soft PVC on the source switch that uses the passive half leg on the
terminating switch.
Switch-B(config)# interface atm 3/0/1
Switch-B(config-if)# atm soft-vc 0 50 dest-address
47.0091.8100.0000.0001.4204.d801.4000.0c85.8000.00 1 60
Command Purpose
Step1 Switch-C(config)# atm filter-set name [index
[number]] [permit | deny] [template | time-of-day
{anytime | start-time {end-time}}]
(Optional) Used to configure the access-control
filter-set parameter in on the passive
destination-side of the soft VC.
Step2 Switch-C(config)# interface atm
card/subcard/port
Switch-C(config-if)#
Selects the interface, on the terminating switch,
being configured.
Step3 Switch-C(config-if)# atm soft-vc dest-vpi
dest-vci passive [pd pd] [upc upc] [rx-cttr index]
[tx-cttr index] [access-control {src-address
atm-address | filter-set name}]
Configures the passive leg on the terminating
switch interface.
Step4 Switch-B(config-if)# atm soft-vc source-vpi
source-vci dest-address atm-address dest-vpi
dest-vci [enable | disable] [upc upc] [pd pd]
[rx-cttr index] [tx-cttr index] [retry-interval
[first retry-interval] [maximum retry-interval]]
Creates a two-ended soft PVC on the source
switch that uses the passive half leg on the
terminating switch.
Step5 Switch-C(config-if)# end Switches to EXEC command mode.
Step6 Switch-C# show atm vc interface atm
card/subcard/port vpi vci
Displays the passive half-leg configuration
information of two-ended soft PVC.