Verifying The Acl Configuration - Alcatel OmniSwitch 6800 Series Network Configuration Manual

Configuring ACLs
The following keywords may be used in the condition to indicate the client parameters:
Multicast ACL Keywords
destination ip
destination vlan
destination port
destination port group
destination mac
destination mac group
If a destination group is specified, the corresponding single value keyword cannot be combined in the
same condition. For example, if a destination port is specified, a destination port group cannot be speci-
fied in the same condition.
To filter multicast clients, specify the multicast IP address, which is the address of the multicast group or
stream, and specify the client IP address, VLAN, MAC address, or slot/port. For example:
-> qos default multicast disposition deny
-> policy condition Mclient1 multicast ip 224.0.1.2 destination vlan 5
-> policy action ok disposition accept
-> policy rule Mrule condition Mclient1 action ok
In this example, any traffic coming in on VLAN 5 requesting membership to the 224.0.1.2 multicast group
will be allowed.

Verifying the ACL Configuration

To display information about ACLs, use the same show commands that are used for displaying any QoS
policies. These commands include:
show policy condition
show policy action
show policy rule
show active policy rule
When a show command is used to display output for all pending and applied policy configuration, the
following characters may appear in the display:
character definition
+ Indicates that the policy rule has been modified or has
been created since the last qos apply.
- Indicates the policy object is pending deletion.
# Indicates that the policy object differs between the pend-
ing/applied objects.
OmniSwitch 6800 Series Network Configuration Guide
Displays information about all pending and applied policy conditions or
a particular policy condition configured on the switch. Use the applied
keyword to display information about applied conditions only.
Displays information about all pending and applied policy actions or a
particular policy action configured on the switch. Use the applied key-
word to display information about applied actions only.
Displays information about all pending and applied policy rules or a par-
ticular policy rule.
Displays the pending and applied policy rules that are active (enabled)
on the switch.
November 2004
Verifying the ACL Configuration
page 22-13