Policies and ACLs
source-address 10.203.134.0/24;
protocol
TCP;
source-port
> 190;
tcp-flags
syn_ack;
} then {
permit;
count tcpcnt ;
qosprofile qp3;
}
}
The following example denies ICMP echo request packets from the 10.203.134.0/24 subnet, and
increments the counter icmpcnt:
entry
icmp {
if
{
source-address 10.203.134.0/24;
protocol
icmp;
icmp-type
echo-request;
} then {
deny;
count icmpcnt;
}
}
The following entry denies every packet and increments the counter default:
entry
default {
if
{
} then {
deny;
count default;
}
}
Displaying and Clearing ACL Counters
To display the ACL counters, use the following command:
show access-list counter {<countername>} {any | ports <portlist> | vlan <vlanname>}
{ingress}
To clear the access list counters, use the following command:
clear access-list counter {<countername>} {any | ports <portlist> | vlan <vlanname>}
{ingress}
Routing Policies
Routing policies are used to control the advertisement or recognition of routes using routing protocols,
such as Routing Information Protocol (RIP), Open Shortest Path First (OSPF), or Border Gateway
Protocol (BGP). Routing policies can be used to "hide" entire networks or to trust only specific sources
for routes or ranges of routes. The capabilities of routing policies are specific to the type of routing
ExtremeWare XOS 11.1 Concepts Guide
190
Need help?
Do you have a question about the ExtremeWare XOS Guide and is the answer not in the manual?
Questions and answers