67
MAC SA A8:F9:4B:00:00:00 [FF:FF:FF:00:00:00]
Vlan 2
COS 4 [4]
Step 4.
Check the list assignment to the port
LTP-8X(switch)# show interfaces acl front-port 7
Interface MAC access-list IP access-list
front-port 0 eltexsrc -
16.2
Configuring IP Access List
The rules of an IP access list support criteria that are available in a MAC access list.
Table 16.2 – The list of the IP access list criteria
Criterion
Mask
Example of a command
Proto ID
no
permit tcp ...
permit udp ...
permit any ...
permit proto <id> ...
Src IP
yes
permit any 10.10.0.0 255.0.255.0 any
Dst IP
yes
permit any any 10.10.0.0 255.0.255.0
DSCP
no
permit any any any dscp 48
Precedence
no
permit any any any precedence 7
Src MAC
yes
permit any any any dscp any mac A8:F9:4B:00:00:00
FF:FF:FF:00:00:00 any
Dst MAC
yes
permit any any any dscp any mac any A8:F9:4B:00:00:00
FF:FF:FF:00:00:00
Vlan
no
permit any any any dscp any mac any any vlan 10
COS
yes
permit any any any dscp any mac any any vlan any cos 4 4
Ethertype
yes
permit any any any dscp any mac any any vlan any cos any
ethertype 0x0800 0xFF00
Step 1.
Create an
ip access-list
LTP-8X# switch
LTP-8X(switch)# configure
LTP-8X(switch)(config)# ip access-list extended filter5
Step 2.
Configure rules and assign the list to a port
LTP-8X(switch)(config-ip-al)# deny tcp 10.10.5.0 255.255.255.0 any any any
LTP-8X(switch)(config-ip-al)# permit tcp 10.10.0.0 255.255.0.0 any any any
LTP-8X(switch)(config-ip-al)# exit
LTP-8X(switch)(config)# interface front-port 7
LTP-8X(switch)(config-if)# service-acl ip filter5
LTP-8X(switch)(config-if)# exit
LTP-8X(switch)(config)# commit
Step 3.
Check the list configuration
LTP-8X(switch)# show access-list
Extended IP access list "filter5"(#10), filters count: 2
Rule 1 (deny):
IPv4 protocol 6 (TCP)
IP SA 10.10.5.0 [255.255.255.0]
Sport 8080
Summary of Contents for LTP-4X
Page 11: ...11 Part I General ...
Page 29: ...29 Part II Getting Started with the Terminal ...
Page 37: ...37 Part III Configuring the Terminal ...
Page 98: ...98 Part IV ONT Configuration ...
Page 174: ...174 Part V Terminal Monitoring ...
Page 189: ...189 Part VI Terminal Maintenance ...
Page 191: ...191 Step 2 Remove the module from the slot Fig 43 4 Removing SFP Transceivers ...