Acl Configuration - Samsung WEC8500 Operation Manual

3.5 QoS
The Access Control List (ACL) allows or blocks a specific network traffic based on an
operator's configuration. The APC provides QoS using ACL.
3.5.1

ACL Configuration

3.5.1.1 Access List Configuration
You can create or delete an access list for ACL configuration. To delete an access list, an
operator can enter the name of an access list directly or enter a command by copying a
value retrieved from the 'show running-config network'. But, if the access list is being used
in the WLAN ACL or Admin ACL, etc., you cannot delete it. Therefore, check if it is being
used in the WLAN ACL or Admin ACL first of all.
Configuration using CLI
1) Go to fqm mode where you can configure the configure  rule of CLI.
APC# configure terminal
APC/configure# fqm-mode
2) Create an access list by entering the 'access-list' command. The 'no' parameter is used
to delete an access list.

access-list [ip/ipv6/mac] [ACL_NAME] [deny/permit/time-profile] seq [seq_NUM]
[1/*/ahp/eigrp/esp/gre/icmp/igmp/igrp/ip/nos/ospf/pcp/pim/17/6/tcp/udp/1-255]
[any/A.B.C.D A.B.C.D/URL] eq [eq_VALUE] [any/A.B.C.D A.B.C.D/URL] eq
[eq_VALUE] os-aware [os-aware_VALUE] [[[dscp [*|[0-63]]|precedence [*|[0-
7])]]]|]
An example of entering a command is shown below.
Creating Access list 'acl1':

APC# configure terminal
APC/configure# fqm-mode
APC/configure# access-list ip acl1 permit seq 1 icmp any any
Deleting Access list 'acl1':

APC# configure terminal
APC/configure# fqm-mode
APC/configure# no access-list ip acl1 permit seq 1 icmp any any
3) Check a created access list using the 'show running-config network' command.
© SAMSUNG Electronics Co., Ltd.
CHAPTER 3. Data Network Function
page 125 of 689