Acl Configuration Overview; Setting The Global Disposition - Alcatel OmniSwitch 6800 Series Network Configuration Manual

Configuring ACLs

ACL Configuration Overview

This section describes the QoS CLI commands used specifically to configure ACLs. ACLs are basically a
type of QoS policy, and the commands used to configure ACLs are a subset of the switch's QoS
commands. For information about basic configuration of QoS policies, see
QoS."
To configure an ACL, the following general steps are required:
1 Set the global disposition. This step is described in
2 Create a condition for the traffic to be filtered. This step is described in
For ACLs" on page 22-8
3 Create an action to accept or deny the traffic. This step is described in
ACLs" on page 22-9.
4 Create a policy rule that combines the condition and the action. This step is described in
Policy Rules for ACLs" on page
For a quick tutorial on how to configure ACLs, see

Setting the Global Disposition

By default, flows that do not match any policies are accepted on the switch. You may configure the switch
to deny any flow that does not match a policy.
Note. Note that the global disposition setting applies to all policy rules on the switch, not just those that
are configured for ACLs.
The global commands include:
qos default bridged disposition
qos default routed disposition
To change the global default dispositions, use these commands with the desired disposition value (accept,
drop, or deny).
For Layer 3 ACLs, it is recommended that the global dispositions be set to deny. For example, the follow-
ing command drops any routed traffic coming into the switch that does not match a policy:
-> qos default routed disposition deny
Policies may then be set up to allow routed traffic through the switch.
Note that in the current release of Alcatel's QoS software, the drop and deny keywords produce the same
result (flows are silently dropped; no ICMP message is sent).
For more information about the global disposition commands, see
OmniSwitch CLI Reference Guide.
OmniSwitch 6800 Series Network Configuration Guide
and "Creating Policy Conditions For ACLs" on page
22-10.
Chapter 21, "Configuring
"Setting the Global Disposition" on page
"Quick Steps for Creating ACLs" on page
Chapter 21, "Configuring QoS,"
November 2004
ACL Configuration Overview
22-7.
"Creating Condition Groups
22-9.
"Creating Policy Actions For
"Creating
22-3.
and the
page 22-7