Avaya 1000 Series Configuration Manual page 100

IP Packet Filter List
2. Create an access list.
3. Add a rule to the current filter list.
4. Exit back a level.
5. Attach to a subinterface.
Table 23: Variable definitions
<destination>
<direction>
<listname>
<procotol>
<rule_action>
<source>
<VLAN subinterface>
Inserting a new rule to an already configured access list
Procedure steps
1. Enter Configuration Mode.
2. Select the access-list.
3. Insert the rule at a specific line number in the access-list.
100 Avaya Secure Router 1000 Series Configuration Guide
configure terminal
ip access-list <listname>
add <rule_action> <protocol> <source> <destination> [sport]
[dport] [icmptype] [icmpcode] [precedence] [tos] [flags]
[log] [expire]
exit
ip access-group <VLAN subinterface> <listname> <direction>
Variable
IP destination address (a.b.c.d/a.b.c.d or a.b.c.d/0-32 or
any).
The direction of packets to filter, in or out.
The ACL name.
The protocol, tcp/udp/icmp/ip or 0-255.
permit rule or deny rule or reject rule (reject rule can be
specified only with ICMP protocol).
IP source address (a.b.c.d/a.b.c.d or a.b.c.d/0-32 or any).
The subinterface to apply the ACL.
configuration terminal
ip access-list <listname>
insert <rule_lineno> <rule_action> <protocol> <source>
<destination> [sport] [dport] [icmptype] [icmpcode]
[precedence] [tos] [flags] [log] [expire]
Value
December 2010