Example - Denying Traffic Between Two Subnets; Example - Denying Tcp Based Traffic - Motorola RFS6000 Reference Manual

14-10 Motorola RF Switch CLI Reference Guide
Usage Guidelines
Use this command to deny traffic between networks/hosts based on the protocol type
selected in the access list configuration. The following protocol types are supported:
• ip
• icmp
• tcp
• udp
The last ACE in the access list is an implicit deny statement.
Whenever the interface receives the packet, its content is checked against the ACEs in the
ACL. It is allowed/denied based on the ACL configuration.
• Filtering TCP/UDP allows the user to specify port numbers as filtering criteria
• Select the ICMP as the protocol to allow/deny ICMP packets. Selecting icmp provides
the option of filtering icmp packets based on icmp type and code

14.1.2.1 Example - Denying Traffic Between Two Subnets

The following example denies traffic between two subnets:
RFSwitch(config-ext-nacl)#deny ip 192.168.2.0/24
192.168.1.0/24
RFSwitch(config-ext-nacl)#permit ip any any
RFSwitch(config-ext-nacl)#

14.1.2.2 Example - Denying TCP Based Traffic

The following example denies TCP traffic with a source port range between 20 - 23 (from
the source subnet to destination subnet):
RFSwitch(config-ext-nacl)#deny tcp range 20 23
192.168.1.0/24 192.168.2.0/24
RFSwitch(config-ext-nacl)#permit ip any any
RFSwitch(config-ext-nacl)#
NOTE: The log option is functional only for router ACL's. The log option
displays an informational logging message about the packet that
matches the entry sent to the console.