Using Acls To Change Cos - Nortel 2360 Configuration Manual

1. permit SRC source IP 192.168.1.1 0.0.0.0
4
To clear the uncommitted acl-111 ACE from the edit buffer, type the following command:
WSS# rollback security acl acl-111
5
To ensure that you have cleared the acl-111 ACE, type the following command. Only the
uncommitted acl-a now appears.
WSS# show security acl info all editbuffer
ACL edit-buffer information for all
set security acl ip acl-a (ACEs 1, add 1, del 0, modified
0)
----------------------------------------------------
1. permit SRC source IP 192.168.1.1 0.0.0.0
6
Alternatively, to clear the entire edit buffer of all changes made since a security ACL was last
committed and display the results, type the following commands:
WSS# rollback security acl all
WSS# show security acl info all editbuffer
ACL edit-buffer information for all

Using ACLs to change CoS

For WMM or non-WMM traffic, you can change a packet's priority by using an ACL to change the packet's
CoS value. A CoS value assigned by an ACE overrides the CoS value assigned by the switch's QoS map.
To change CoS values using an ACL, you must map the ACL to the outbound traffic direction on an AP port,
Distributed AP, or user VLAN.
For example, to remap IP packets from IP address 10.10.20.5 that have IP precedence value 3, to have CoS
value 7 when they are forwarded to any 10.10.30.x address on Distributed AP 2, enter the following
commands:
WSS# set security acl ip acl1 permit cos 7 ip 10.10.20.5 0.0.0.0 10.10.30.0 0.0.0.255
precedence 3
success: change accepted.
WSS# set security acl ip acl1 permit any
success: change accepted.
WSS# commit security acl acl1
success: change accepted.
WSS# set security acl map acl1 ap 2 out
success: change accepted.
The default action on an interface and traffic direction that has at least one access control entry (ACE) config-
ured, is to deny all traffic that does not match an ACE on that interface and traffic direction. The permit any
Configuring and managing security ACLs 431
Nortel WLAN—Security Switch 2300 Series Configuration Guide