Nortel Networks 2300 manual Using ACLs to Change CoS, 23x0# rollback security acl acl-111

374Configuring and Managing Security ACLs

4To clear the uncommitted acl-111ACE from the edit buffer, type the following command:

23x0# rollback security acl acl-111

5To ensure that you have cleared the acl-111ACE, type the following command. Only the uncommitted acl-anow appears.

23x0# show security acl info all editbuffer

ACL edit-buffer information for all

set security acl ip acl-a (ACEs 1, add 1, del 0, modified 0)

----------------------------------------------------

1.permit SRC source IP 192.168.1.1 0.0.0.0

6Alternatively, to clear the entire edit buffer of all changes made since a security ACL was last committed and display the results, type the following commands:

23x0# rollback security acl all

23x0# show security acl info all editbuffer

ACL edit-buffer information for all

Using ACLs to Change CoS

For WMM or non-WMM traffic, you can change a packet’s priority by using an ACL to change the packet’s CoS value. To change CoS value using an ACL, you must map the ACL to the outbound traffic direction on an AP port, Distributed AP, or user VLAN.

For example, to remap IP packets from IP address 10.10.20.5 that have IP precedence value 3, to have CoS value 7 when they are forwarded to any 10.10.30.x address on Distributed AP 2, enter the following commands:

23x0# set security acl ip acl1 permit cos 7 ip 10.10.20.5 0.0.0.0 10.10.30.0 0.0.0.255 precedence 3

success: change accepted.

23x0# set security acl ip acl1 permit 0.0.0.0 255.255.255.255 success: change accepted.

23x0# commit security acl acl1

success: change accepted.

23x0# set security acl map acl1 dap 2 out success: change accepted.

The default action on an interface and traffic direction that has at least one access control entry (ACE) configured, is to deny all traffic that does not match an ACE on that interface and traffic direction. The permit 0.0.0.0 255.255.255.255 ACE ensures that traffic that does not match the first ACE is permitted. Without this additional ACE at the end, traffic that does not match the other ACE is dropped.

320657-A