Lucent Technologies P550 Creating Extended Access Rules

Configuring IP Routing (Layer 3)

Creating Extended Access Rules

To create extended access rules:

1.In the IP Configuration section of the Web Agent window, click Access Lists. The IP Access List dialog box opens.

Note: The IP Access List dialog box displays all standard and extended access rules that have been created. If no rules have been created, the following statement displays: No IP Access Rules are currently configured.

2.Click Create Extended. The IP Extended Access Rule Creation dialog box opens.

3.Use Table 7-5 to configure your IP access rules to either filter or prioritize traffic:

Table 7-5.IP Extended Access Rule Creation Parameters

Parameter	Allows you to specify...
Access List Name	An alphanumeric name assigned to the newly-created access
	list.
Access Rule Index	The sequence number for each new rule you create. Note that
	rules may override each other, so review your current
	configuration prior to creating new rules for an access list.
Access Type	The method of handling incoming datagrams based on the IP
	access type you set. Priority levels include:
	•	Deny/Filter - Allows you to filter out traffic based on the
		specified configuration.
	• Permit/Fwd pri8 (high) to pri1 (low) - Allows you to
		prioritize traffic based on the specified configuration.
	• Permit/Fwd with no change in priority - Allows you to
		forward traffic with no change in priority.
Source Subnet	• Source Address - The IP address of a subnet that is denied
		or granted access to the switch.
	•	Source Wildcard - A range of IP addresses that are denied
		or granted access to the switch. Place the number one (1)
		in the bit positions you want to ignore.
Destination Subnet	•	Dest Address - The IP address of a subnet that is denied
		or granted access to data from the switch.
	•	Dest Address Wildcard - A range of IP addresses of
		subnets that are denied or granted access to the switch.
		Place the number one (1) in the bit positions you want to
		ignore.
Protocol ID	A protocol ID to be filtered. (For example, ICMP=1, IGMP=2).
	A single asterisk (*) indicates all protocols.

7-10 Cajun P550/P220 Switch Operation Guide