Table of Contents
Advertisement
Chapter 23
Sample Output:
Extended ACL
Rules
23-6
Table 23-2. Examples: Standard ACL Rules
To. . .
• Use the DSCP in the packet to
classify all traffic that has a source
IP address of 3.3.3.3
• Mask the three least significant bits
of the DSCP
Assign a priority of 2 to all traffic that
has a source IP address of 1.1.1.1
Block all traffic that has a source IP
address of 10.1.0.55
The following table provides examples of extended ACL rules.
Table 23-3. Examples: Extended ACL Rules
To. . .
Use the DSCP in the packet to classify
all traffic that has a:
• Source IP address of 199.93.239.168
• Destination address in the 1.1.1
subnet
Use the DSCP in the packet to classify
all traffic that has a:
• Source IP address in the 3.0 subnet
• Destination address in the 5.0 subnet
• Mask the three least significant bits
of the DSCP
Assign a priority of 2 to all TCP traffic
that has a:
• Source IP address in the 1.1 subnet
• Source port that is greater than 24
• Destination IP address in the 6.6
subnet
• Destination port of 23
Command Reference Guide for the Avaya P580 and P882 Multiservice Switches, v6.1
Enter. . .
(configure)# access-list
MyAccessList1 9 permit use-
diffserv mask host 3.3.3.3
(configure)# access-list
MyAccessList1 10 permit use-
priority 2 1.1.1.1
(configure)# access-list
MyAccessList1 11 deny 10.1.0.55
Enter. . .
(configure)# access-list
MyAcessList2 1 permit use-diffserv
ip host 199.93.239.168 1.1.1.0
0.0.0.255
(configure)# access-list
MyAccessList2 2 permit use-
diffserv mask ip 3.0.0.0
0.255.255.255 5.0.0.0 0.255.255.255
(configure)# access-list
MyAccessList2 3 permit use-
priority 2 tcp 1.1.0.0 0.0.255.255 gt
24 6.6.0.0 0.0.255.255 eq 23
2 of 2
1 of 3
Advertisement
Table of Contents
