ADTRAN AOS Version R10.1.0 Command Reference Manual page 3146

Command Reference Guide
2. Using host <ipv4 address> to specify a single host address.
3. Using the <ipv4 address> <wildcard> format to match all IPv4 addresses in a range. Wildcard masks
work in reverse logic from subnet masks. When broken out into binary form, a 0 indicates which bits of
the IPv4 address to consider, a 1 indicates which bits are disregarded. For example, specifying 255 in
any octet of the wildcard mask equates to a "don't care" for that octet in the IPv4 address. Additionally,
a 30-bit mask would be represented with the wildcard string 0.0.0.3, a 28-bit mask with 0.0.0.15, a
24-bit mask with 0.0.0.255, and so forth.
4. Using the keyword hostname to match based on a domain naming system (DNS) name. DNS servers
must be configured or host names must be locally defined for this function to work.
Step 4:
Apply the created IPv4 ACP to an interface. To assign an IPv4 ACP to an interface, enter the interface
configuration mode for the desired interface and enter ip access-policy <ipv4 acp name>. The following
example assigns ACP UNTRUSTED to the Ethernet 0/1 interface:
(config)#interface ethernet 0/1
(config-eth 0/1)#ip access-policy UNTRUSTED
The following commands are common to multiple command sets and are covered in a centralized section
of this guide. For more information, refer to the sections listed below:
cross-connect on page 67
do on page 71
exit on page 73
interface on page 74
All other commands for this command set are described in this section in alphabetical order.
allow list on page 3147
allow reverse list on page 3149
discard list on page 3151
nat destination list on page 3153
nat destination list <ipv4 acl name> pool <pool name> on page 3155
nat source list on page 3157
nat source list <ipv4 acl name> pool <pool name> on page 3160
60000CRG0-35E Copyright © 2012 ADTRAN, Inc.
IPv4 Access Control Policy Command Set
3146