![](/images/new-backgrounds/1190993/190993175x1.webp)
OnSite 2800 Series User Manual7 • Access control list configuration
Where the syntax is:
Keyword | Meaning |
|
|
src | The source address to be included in the rule. An IP address in |
| e.g. 64.231.1.10. |
| A wildcard for the source address. Expressed in |
| which bits are significant for matching. |
| sponding bits are ignored. An example for a valid wildcard is 0.0.0.255, which speci- |
| fies a class C network. |
|
|
any | Indicates that IP traffic to or from all IP addresses is to be included in the rule. |
host src | The address of a single source host. |
|
|
eq port | Optional. Indicates that a packets port must be equal to the specified port in order to |
| match the rule. |
lt port | Optional. Indicates that a packets port must be less than the specified port in order to |
| match the rule. |
|
|
gt port | Optional. Indicates that a packets port must be greater than the specified port in order to |
| match the rule |
range from to | Optional. Indicates that a packets port must be equal or greater than the specified from |
| port and less than the specified to port to match the rule. |
|
|
dest | The destination address to be included in the rule. An IP address in |
| mat, e.g. 64.231.1.10. |
A wildcard for the destination address. See | |
|
|
host dest | The address of a single destination host. |
cos | Optional. Specifies that packets matched by this rule belong to a certain Class of Service |
| (CoS). For detailed description of CoS configuration refer to chapter 8, “Link scheduler |
| configuration” on page 93. |
|
|
| Optional. Specifies that the rule is intended to filter RTP/RTCP packets. In this mode you |
| can specify different CoS groups for data packets (even port numbers) and control pack- |
| ets (odd port numbers). Note: this option is only valid when protocol UDP is selected. |
group | CoS group name. |
|
|
| CoS group name for RTP data packets. Only valid when the rtp option has been specified |
| CoS group name for RTCP control packets. Only valid when the rtp option has been spec- |
| ified. |
|
|
Example: Create TCP or UDP access control list entries
Select the
Permitting any TCP traffic to host 193.14.2.10 via port 80, and permitting UDP traffic from host 62.1.2.3 to host 193.14.2.11 via any port in the range from 1024 to 2048.
2800(cfg)#profile acl WanRx
2800(cfg)#
Access control list configuration task list | 88 |