Verifying The Acl Configuration - Alcatel OmniSwitch 6624 Network Configuration Manual

Verifying the ACL Configuration

To filter multicast clients, specify the multicast IP address, which is the address of the multicast group or
stream, and specify the client IP address, VLAN, MAC address, or slot/port. For example:
-> qos default multicast disposition deny
-> policy condition Mclient1 multicast ip 224.0.1.2 destination vlan 5
-> policy action ok disposition accept
-> policy rule Mrule condition Mclient1 action ok
In this example, any traffic coming in on VLAN 5 requesting membership to the 224.0.1.2 multicast group
will be allowed.
Verifying the ACL Configuration
To display information about ACLs, use the same show commands that are used for displaying any QoS
policies. These commands include:
show policy condition
show policy action
show policy rule
show active policy rule
When a show command is used to display output for all pending and applied policy configuration, the
following characters may appear in the display:
character definition
+ Indicates that the policy rule has been modified or has
been created since the last qos apply.
- Indicates the policy object is pending deletion.
# Indicates that the policy object differs between the pend-
ing/applied objects.
The following example shows all policy rules configured on the switch:
-> show policy rule
my_rule
Cnd/Act:
+my_rule5
Cnd/Act:
mac1
Cnd/Act:
page 22-16
Displays information about all pending and applied policy conditions or
a particular policy condition configured on the switch. Use the applied
keyword to display information about applied conditions only.
Displays information about all pending and applied policy actions or a
particular policy action configured on the switch. Use the applied key-
word to display information about applied actions only.
Displays information about all pending and applied policy rules or a par-
ticular policy rule.
Displays the pending and applied policy rules that are active (enabled)
on the switch.
Policy From Prec
cli
cond5 -> action2
cli
cond2 -> pri2
cli
dmac1 -> pri2
OmniSwitch 6624/6648 Network Configuration Guide
Enab Inact Refl Log Save
0 Yes Yes No
0 Yes No No
0 Yes No No
Configuring ACLs
No Yes
No Yes
No Yes
April 2004