Contents
xx OmniSwitch 6600 Family Network Configuration Guide April 2006
Policy Applications .....................................................................................................38-49
Basic QoS Policies ...............................................................................................38-49
Basic Commands ...........................................................................................38-50
Traffic Prioritization Example .......................................................................38-50
Bandwidth Shaping Example ........................................................................38-50
ICMP Policy Example ..........................................................................................38-51
802.1p and ToS/DSCP Marking and Mapping ....................................................38-51
Chapter 25 Configuring ACLs ......................................................................................................39-1
In This Chapter ..............................................................................................................39-1
ACL Specifications .......................................................................................................39-2
ACL Defaults ................................................................................................................39-2
Quick Steps for Creating ACLs ....................................................................................39-3
ACL Overview ..............................................................................................................39-4
Rule Precedence .....................................................................................................39-5
Example: Rule Type ........................................................................................39-5
Example: Rule Order .......................................................................................39-5
Example: Layer 3 Rules With Compatible Actions ........................................39-6
Example: Layer 3 Rules With Conflicting Actions .........................................39-6
Interaction With Other Features .............................................................................39-7
Valid Combinations ................................................................................................39-7
ACL Configuration Overview .......................................................................................39-8
Setting the Global Disposition ......................................................................................39-8
Creating Condition Groups For ACLs ........................................................................39-10
Configuring ACLs .......................................................................................................39-10
Creating Policy Conditions For ACLs .................................................................39-10
Creating Policy Actions For ACLs ......................................................................39-11
Creating Policy Rules for ACLs ...........................................................................39-11
Layer 2 ACLs .......................................................................................................39-12
Layer 2 ACL: Example 1 ..............................................................................39-13
Layer 2 ACL: Example 2 ..............................................................................39-13
Layer 3 ACLs .......................................................................................................39-14
Layer 3 ACL: Example 1 ..............................................................................39-14
Layer 3 ACL: Example 2 ..............................................................................39-15
Multicast Filtering ACLs .....................................................................................39-15
Using ACL Security Features .....................................................................................39-17
Configuring a UserPorts Group ............................................................................39-17
Configuring a DisablePorts ACL .........................................................................39-18
Configuring a DropServices Group ACL .............................................................39-19
Configuring ICMP Drop Rules ............................................................................39-21
Configuring a BPDUShutdownPorts Group ........................................................39-21
Verifying the ACL Configuration ...............................................................................39-22
ACL Application Example ..........................................................................................39-24