166 Access
Control
List Configuration
Software Configuration Guide Release 2.10, Revision 1.00
Example: Create ICMP Access Control List Entries
Select the access-list profile named WanRx and create the rules to filter all ICMP echo requests (as
used by the ping command).
SN(cfg)#
profile acl WanRx
SN(pf-acl)[WanRx]#
deny icmp any any type 8 code 0
SN(pf-acl)[WanRx]#
exit
SN(cfg)#
The same effect can also be obtained by using the simpler message name option. See the following
example.
SN(cfg)#
profile acl WanRx
SN(pf-acl)[WanRX]#
deny icmp any any msg echo
SN(pf-acl)[WanRX]#
exit
SN(cfg)#
19.7 Add a TCP, UDP or SCTP Filter Rule to the Current
Access Control List Profile
The commands
permit
or
deny
are used to define a TCP, UDP or SCTP filter rule. Each TCP, UDP or
SCTP filter rule represents a respective access of control list entry.
Procedure
To create a TCP, UDP or SCTP access control list entry that
permits access
Mode
Profile access control list
Command
Purpose
Step 1
node
(pf-acl)[
name
]#permit {tcp | udp | sctp}
{
src src-wildcard
|
any
|
host
src
} [{
eq
port
|
gt
port
|
lt
port
|
range
from
to
}] {
dest dest-wildcard
|
any
|
host
dest
} [{
eq
port
|
gt
port
|
lt
port
|
range
from
to
}] [{
cos
group
|
cos-rtp
group-data
group-ctrl
}]
Creates a TCP, UDP or SCTP
access of control list entry that
permits access defined according
to the command options
Procedure
To create an TCP, UDP or SCTP access control list entry that
denies access
Mode
Profile access control list
Command
Purpose
Step 1
node
(pf-acl)[
name
]#deny {tcp | udp | sctp}
{
src
src-wildcard
|
any
|
host
src
} [{
eq
port
|
gt
port
|
lt
port
|
range
from
to
}] {
dest dest-wildcard
|
any
|
host
dest
} [{
eq
port
|
gt
port
|
lt
port
|
range
from
to
}] [{
cos
group
|
cos-rtp
group-data
group-ctrl
}]
Creates a TCP, UDP or SCTP
access of control list entry that
denies access defined according to
the command options
Where the syntax is:
Summary of Contents for SmartWare Release 2.10
Page 2: ...2 Legal Notice Software Configuration Guide Release 2 10 Revision 1 00...
Page 15: ...Terms and Definitions 15 Software Configuration Guide Release 2 10 Revision 1 00...
Page 218: ...218 PPP Configuration no shutdown Software Configuration Guide Release 2 10 Revision 1 00...
Page 272: ...272 Tone Configuration Software Configuration Guide Release 2 10 Revision 1 00...
