Sample Examples Of Configuring Filters On Oa-700 - Alcatel-Lucent OmniAccess 700 Cli Configuration Manual

Left running head:
Chapter name (automatic)
Filter and Firewall
S E
AMPLE XAMPLES OF
E 1:
XAMPLE
If GigabitEthernet7/0 is the interface positioned to be the outside gateway, the
configuration shown below allows traffic initiated from inside and corresponding
response coming from outside. It also denies all traffic initiated from outside.
match-list m1
ip filter f1
10
ip filter f2
10
interface GigabitEthernet7/0
E 2:
XAMPLE
Consider the following example where filter f2 is regarded as stateless. Now, the
return traffic will be dropped. For example, HTTP requests from internal network
matches m1 in f2, they will be passed to external network. But the HTTP response
coming back will be blocked by filter "f1" since previously allowed traffic is
stateless (non-reflexive).
ip filter f2
10
E 3:
XAMPLE
If you need to give access from the network 192.168.1.0/24 to 192.168.2.0/24, the
CLI would be as follows:
match-list m1
ip prefix 192.168.1.0/24 prefix 192.168.2.0/24 type ftp
ip filter f1
10 match m1 permit
default deny
664
Beta
C F
ONFIGURING ILTERS ON
ip any any
match m1 deny
match m1 permit
ip filter in f1
ip filter out f2
match m1 permit
default deny
stateless
Alcatel-Lucent
OA-700
CLI Configuration Guide
Beta