Table of Contents
Advertisement
Document No. 10-300090, Issue 1
Table 20-3. Sample Extended ACL Rules
To . . . Continued
Use the DSCP in the packet to
classify all traffic that has a:
• Source IP address in the 3.0 subnet
• Destination address in the 5.0
subnet
• Mask the three least significant bits
of the DSCP
Assign a priority of 2 to all TCP
traffic that has a:
• Source IP address in the 1.1 subnet
• Source port that is greater than 24
• Destination IP address in the 6.6
subnet
• Destination port of 23
• Replace the existing DSCP of
packets with a DSCP of 12 for all
traffic that has a source IP address
of 199.93.238.83.
• Mask the three least significant bits
of the DSCP.
Replace the existing DSCP of the
packet with a DSCP of 24 for all
ICMP traffic that has a:
• Source IP address of 2.2.2.2
• Destination IP address of 4.4.4.4
Assign a priority of 6 to all TCP
traffic that has a:
• Source IP address in the 10.10.10
subnet
• Destination IP address in the
11.11.11 subnet
• Destination port of 1
Use the layer 2 priority in the packet
to classify all UDP traffic
Enter . . .
access-list MyAccessList2 2 permit use-
diffserv mask ip 3.0.0.0 0.255.255.255
5.0.0.0 0.255.255.255
access-list MyAccessList2 3 permit use-
priority 2 tcp 1.1.0.0 0.0.255.255 gt 24
6.6.0.0 0.0.255.255 eq 23
access-list MyAccessList2 4 permit
remark l2 mask ip host 199.93.238.83
any
access-list MyAccessList2 5 permit
remark-diffserv 24 icmp host 2.2.2.2 host
4.4.4.4
access-list MyAccessList2 6 permit use-
priority 6 tcp 10.10.10.0 0.0.0.255
11.11.11.0 0.0.0.255 eq 1
access-list MyAccessList2 7 permit use-
l2 udp any any
Policy
2 of 3
20-7
Advertisement
Table of Contents
