Nortel Networks 42C4911 manual ACL Configuration Examples, Configure an Access Control List

Alteon OS Application Guide

ACL Configuration Examples

Example 1

Use this configuration to block traffic to a specific host. All traffic that ingresses on port EXT1 is denied if it is destined for the host at IP address 100.10.1.1

1.Configure an Access Control List.

>> Main# cfg/acl/acl 1 (Define ACL 1)

>>ACL 1# ipv4/dip 100.10.1.1

Enter destination IP address mask (default 255.255.255.255): >> Filtering IPv4# ..

>> ACL 1# action deny

2.	Add ACL 1 to port EXT1.
	>> Main# cfg/port	ext1/aclqos	(Select port EXT 1 to assign ACLs)
	>> Port EXT1 ACL#	/add acl 1	(Assign ACL 1 to the port)
3.	Apply and save the configuration.
	>> Port EXT1 ACL#	apply
	>> Port EXT1 ACL#	save

Example 2

Use this configuration to block traffic from a network destined for a specific host address. All traffic that ingresses in port EXT2 with source IP from the class 100.10.1.0/24 and destination IP 200.20.2.2 is denied.

1.Configure an Access Control List.

>> Main# cfg/acl/acl 2 (Define ACL 2)

>>ACL 2# ipv4/sip 100.10.1.0 255.255.255.0

>>Filtering IPv4# ipv4/dip 200.20.2.2 255.255.255.255

>>Filtering IPv4# ..

>>ACL 2# action deny

2.Add ACL 2 to port EXT2.

>>	Main# cfg/port	ext2/aclqos	(Select port EXT2 to assign ACLs)
>>	Port EXT2 ACL#	/add acl 2	(Assign ACL 2 to the port)

132 „ Chapter 7: Quality of Service 42C4911, January 2007