Verifying The Acl Configuration To Apns - Cisco ASR 5500 Administration Manual

Applying a Single ACL to Multiple Subscribers
Important
To configure the system to provide access control list facility to subscribers:
Step 1 Apply the configured access control list by following the example configuration in
Subscriber via APNs, on page
Step 2 Verify that ACL is applied properly on interface by following the steps in
on page 200.
Step 3
Save your configuration to flash memory, an external memory device, and/or a network location using the Exec mode
save configuration command. For additional information refer to the Verifying and Saving Your Configuration chapter.

Verifying the ACL Configuration to APNs

To verify the ACL configuration:
Verify that your ACL lists were applied properly by entering the following command in Exec Mode:
show configuration context context_name
context_name is the name of the context containing the APN apn1 having default subscriber to which the ACL(s) was/were
applied.
The output of this command displays the configuration of the entire context. Examine the output for the commands
pertaining to interface configuration. The commands display the ACL(s) applied using this procedure.
configure
context_name
context
ip access-list
deny host
deny ip any host
exit
ip access-group
interface
ip address
exit
subscriber default
exit
apn_name
apn
ip access-group
ip access-group
ASR 5500 System Administration Guide, StarOS Release 19
200
This section provides the minimum instruction set for applying the ACL list to all traffic within a context.
For more information on commands that configure additional parameters and options, refer to the Subscriber
Configuration Mode Commands chapter in the Command Line Interface Reference.
199.
acl_name
ip_address
ip_address
access_group_name
interface
ip_address/mask
access_group_name
access_group_name
end
Verifying the ACL Configuration to APNs,
in
out
Access Control Lists
Applying an ACL to Multiple