12-4
ATM Switch Router Software Configuration Guide
OL-7396-01
Chapter12 Using Access Control
Configuring ATM Filter Sets
Switch(config)# atm filter-set filter_2 deny
47.0000.8100.5678.0003.c386.b301.0003.c386.b301.00
Switch(config)# atm filter-set filter_2 permit default
The following example creates a filter named filter_3 that denies access to all ATM addresses that begin
with the prefix47.840F, but permits all other calls:
Switch(config)# atm filter-set filter_3 deny 47.840F...
Switch(config)# atm filter-set filter_3 permit default
Note The order in which deny and permit filters are configured is very important. See the following example.
In the following example, the first filter set, filter_4, has its first filter configured to permit all addresses
and its second filter configured to deny access to all addressees that begin with the prefix 47.840F. Since
the default filter matches all addresses, the second filter is never used. Addresses that begin with
prefix47.840F are also permitted.
Switch(config)# atm filter-set filter_4 permit default
Switch(config)# atm filter-set filter_4 deny 47.840F...
The following example creates a filter named filter_5 that denies access to all ATM addresses described
by the ATM template alias bad_users:
Switch(config)# atm filter-set filter_5 deny bad_users
Switch(config)# atm filter-set filter_5 permit default
The following example shows how to configure a filter set named tod1, with an index of 2, to deny calls
between 11:15a.m. and 10:45 p.m.:
Switch(config)# atm filter-set tod1 index 2 deny time-of-day 11:15 22:45
Switch(config)# atm filter-set tod1 index 3 permit time-of-day anytime
The following example shows how to configure a filter set named tod1, with an index of 4, to permit calls
any time:
Switch(config)# atm filter-set tod1 index 4 permit time-of-day anytime
The following example shows how to configure a filter set named tod2 to deny calls between
8:00 p.m. and 6:00 a.m.:
Switch(config)# atm filter-set tod2 deny time-of-day 20:00 06:00
Switch(config)# atm filter-set tod2 permit time-of-day anytime
The following example shows how to configure a filter set named tod2 to permit calls at any time:
Switch(config)# atm filter-set tod2 permit time-of-day 3:30 3:30
Once you create a filter set using the previous configuration commands, it must be associated with an
interface as an access group to actually filter any calls. See Configuring ATM Interface Access Control
to configure an individual interface with an access group.