Defining Global Rules; Defining Rules - Avaya G350 Administration

•
Outgoing packets:
a
Apply the device-wide egress policy lists.
b
Apply the egress policy lists that are attached to the interface.

Defining global rules

In an access control list, you can define global rules for packets that contain IP fragments and IP options.
These rules apply to all packets. This is in contrast to individual rules, which apply to packets that match
certain defined criteria. See
The G350 applies global rules before applying individual rules.
To define a global rule:
1
Enter the context of the access control list in which you want to define the rule.
2
Enter one of the following commands, followed by the name of a composite command:
— ip-fragments-in
—
ip-fragments-out
—
ip-options-in
—
ip-options-out
The composite command can be any command defined in the composite operation list. These commands
are case-sensitive. To view the composite operation list for the access control list you are working with,
type the command
The following example defines a rule in Access Control List 301 that denies access to all incoming
packets that contain IP fragments:
G350-???(super)# ip access-control-list 301
G350-???(super/ACL 301)# ip-fragments-in Deny
Done!

Defining rules

This section provides information on how to configure rules in a policy list and contains the following
topics:
•
Overview of rule criteria
rules
•
Editing and creating rules
•
Rule criteria
Administration of the Avaya G350 Media Gateway
June 2004
Defining rules on page 165.
— applies to incoming packets that contain IP fragments
— applies to outgoing packets that contain IP fragments
— applies to incoming packets that contain IP options
— applies to outgoing packets that contain IP options
show composite-operation
— an overview of the criteria that can be used in configuring policy
— instructions on how to edit or create a policy rule
— instructions on how to configure a policy rule's criteria
in the context of the access control list.
Configuring policy
Defining global rules
165