Nortel Networks 42C4911 Switch User Manual


 
Alteon OS Application Guide
132
Chapter 7: Quality of Service 42C4911, January 2007
ACL Configuration Examples
Example 1
Use this configuration to block traffic to a specific host. All traffic that ingresses on port EXT1
is denied if it is destined for the host at IP address 100.10.1.1
1. Configure an Access Control List.
2. Add ACL 1 to port EXT1.
3. Apply and save the configuration.
Example 2
Use this configuration to block traffic from a network destined for a specific host address. All
traffic that ingresses in port EXT2 with source IP from the class 100.10.1.0/24 and destination
IP 200.20.2.2 is denied.
1. Configure an Access Control List.
2. Add ACL 2 to port EXT2.
>> Main# cfg/acl/acl 1 (Define ACL 1)
>> ACL 1# ipv4/dip 100.10.1.1
Enter destination IP address mask (default 255.255.255.255):
>> Filtering IPv4# ..
>> ACL 1# action deny
>> Main# cfg/port ext1/aclqos (Select port EXT 1 to assign ACLs)
>> Port EXT1 ACL# /add acl 1 (Assign ACL 1 to the port)
>> Port EXT1 ACL# apply
>> Port EXT1 ACL# save
>> Main# cfg/acl/acl 2 (Define ACL 2)
>> ACL 2# ipv4/sip 100.10.1.0 255.255.255.0
>> Filtering IPv4# ipv4/dip 200.20.2.2 255.255.255.255
>> Filtering IPv4# ..
>> ACL 2# action deny
>> Main# cfg/port ext2/aclqos (Select port EXT2 to assign ACLs)
>> Port EXT2 ACL# /add acl 2 (Assign ACL 2 to the port)