Acl Example 3; Acl Example 4; Acl Example 5 - Lenovo RackSwitch G8264 Application Manual

ACL Example 3
1. Configure an Access Control List.
2. Add ACL 2 to port 2.
ACL Example 4
1. Configure an Access Control List.
2. Add ACL 2 to port EXT2.
ACL Example 5
1. Configure Access Control Lists.
2. Add ACLs to a port.
134
G8264 Application Guide for ENOS 8.4
Use this configuration to block traffic from a specific IPv6 source address. All
traffic that ingresses in port 2 with source IP from class 2001:0:0:5:0:0:0:2/128 is
denied.
RS G8264(config)# access­control list6 3 ipv6 source­address
2001:0:0:5:0:0:0:2 128
RS G8264(config)# access­control list6 3 action deny
RS G8264(config)# interface port 2
RS G8264(config­if)# access­control list6 3
RS G8264(config­if)# exit
Use this configuration to deny all ARP packets that ingress a port.
RS G8264(config)# access­control list 2 ethernet ethernet­type arp
RS G8264(config)# access­control list 2 action deny
RS G8264(config)# interface port 2
RS G8264(config­if)# access­control list 2
RS G8264(config­if)# exit
Use the following configuration to permit access to hosts with destination MAC
address that matches 11:05:00:10:00:00 FF:F5:FF:FF:FF:FF and deny access to all
other hosts.
RS G8264(config)# access­control list 30 ethernet destination­mac­address
11:05:00:10:00:00 FF:F5:FF:FF:FF:FF
RS G8264(config)# access­control list 30 action permit
RS G8264(config)# access­control list 100 ethernet
destination­mac­address 00:00:00:00:00:00 00:00:00:00:00:00
RS G8264(config)# access­control list 100 action deny
RS G8264(config)# interface port 2
RS G8264(config­if)# access­control list 30
RS G8264(config­if)# access­control list 100
RS G8264(config­if)# exit