Creating Extended Access Rules - Lucent Technologies Cajun P220 Operation Manual

Configuring IP Routing (Layer 3)

Creating Extended Access Rules

To create extended access rules:
1. In the IP Configuration section of the Web Agent window, click Access Lists.
The IP Access List dialog box opens.
Note: The IP Access List dialog box displays all standard and extended access rules
2. Click Create Extended. The IP Extended Access Rule Creation dialog box opens.
3. Use Table 7-5 to configure your IP access rules to either filter or prioritize traffic:
Parameter
Access List Name
Access Rule Index
Access Type
Source Subnet
Destination Subnet
Protocol ID
7-10
that have been created. If no rules have been created, the following
statement displays: No IP Access Rules are currently
configured.
Table 7-5. IP Extended Access Rule Creation Parameters
Allows you to specify...
An alphanumeric name assigned to the newly-created access
list.
The sequence number for each new rule you create. Note that
rules may override each other, so review your current
configuration prior to creating new rules for an access list.
The method of handling incoming datagrams based on the IP
access type you set. Priority levels include:
• Deny/Filter - Allows you to filter out traffic based on the
specified configuration.
• Permit/Fwd pri8 (high) to pri1 (low) - Allows you to
prioritize traffic based on the specified configuration.
• Permit/Fwd with no change in priority - Allows you to
forward traffic with no change in priority.
• Source Address - The IP address of a subnet that is denied
or granted access to the switch.
• Source Wildcard - A range of IP addresses that are denied
or granted access to the switch. Place the number one (1)
in the bit positions you want to ignore.
• Dest Address - The IP address of a subnet that is denied
or granted access to data from the switch.
• Dest Address Wildcard - A range of IP addresses of
subnets that are denied or granted access to the switch.
Place the number one (1) in the bit positions you want to
ignore.
A protocol ID to be filtered. (For example, ICMP=1, IGMP=2).
A single asterisk (*) indicates all protocols.
Cajun P550/P220 Switch Operation Guide