ADTRAN AOS Version R10.1.0 Command Reference Manual page 3159

Command Reference Guide
Functional Notes
AOS IPv4 ACPs are used to allow, discard, or manipulate (using NAT) data for each physical interface.
Each IPv4 ACP consists of an action (allow, discard, nat) and a selector (ACL). When packets are
received on an interface, the configured IPv4 ACPs are applied to determine whether the data will be
processed or discarded.
An implicit discard exists at the end of every IPv4 ACP. Specifying a discard list is
unnecessary in most applications and should be used with caution. A discard list can
adversely affect certain functions of a unit (VPN, routing protocols, etc.). Specifying an
empty IPv4 ACL or a nonexistent IPv4 ACL in an IPv4 ACP will result in an implicit
permit.
The optional vrf <vrf name> parameter specifies the VRF instance corresponding to the specified address.
(If an interface is specified, the VRF of that interface is used.) The VRF does not have to be the same VRF
from which the packet originated. VRF on an AOS product allows a single physical router to be partitioned
into multiple virtual routers. Each router VRF instance has its own route table and interface assignments.
Beginning with Release 16.1, all AOS routers supporting multiple VRF instances (multi-VRF) have an
unnamed default VRF instance regardless of whether multi-VRF is configured. Therefore, executing the
abovementioned commands without specifying a VRF indicates that the specified address corresponds to
the default unnamed VRF.
Usage Examples
The following configuration enables NAT for traffic that matches the IPv4 ACL MATCHALL and changes
the source address to 63.12.1.2:
(config)#ip policy-class UNTRUSTED
(config-policy-class)#nat source list MATCHALL address 63.12.1.2 overload
60000CRG0-35E Copyright © 2012 ADTRAN, Inc.
IPv4 Access Control Policy Command Set
3159