Patton electronics IPLink 3210 Series Getting Started Manual page 62

IPLink 3210 Series Getting Started Guide
Mode: Profile access control list
Step
node (pf-acl)[ name ]#deny ip { src src-wildcard | any | host
1
src } { dest dest-wildcard | any | host dest } [cos group ]
Where the syntax is:
Keyword Meaning
The source address to be included in the rule. An IP address in dotted-decimal-format,
src
e.g. 64.231.1.10.
A wildcard for the source address. Expressed in dotted-decimal format this value specifies
src-wildcard
which bits are significant for matching. One-bits in the wildcard indicate that the corre-
sponding bits are ignored. An example for a valid wildcard is 0.0.0.255, which speci-
fies a class C network.
Indicates that IP traffic to or from all IP addresses is to be included in the rule.
any
The address of a single source host.
host src
The destination address to be included in the rule. An IP address in dotted-decimal-for-
dest
mat, e.g. 64.231.1.10.
dest-wildcard A wildcard for the destination address. See src-wildcard
The address of a single destination host.
host dest
Optional. Specifies that packets matched by this rule belong to a certain Class of Service
cos
(CoS). For detailed description of CoS configuration refer to chapter 7,
configuration"
CoS group name.
group
If you place a deny ip any any rule at the top of an access control list profile, no packets will pass regardless of
the other rules you defined.
Example: Create IP access control list entries
Select the access-list profile named WanRx and create some filter rules for it.
3210(cfg)#profile acl WanRx
3210(pf-acl)[WanRx]#permit ip host 62.1.2.3 host 193.14.2.11 cos Urgent
3210(pf-acl)[WanRx]#permit ip 62.1.2.3 0.0.255.255 host 193.14.2.11
3210(pf-acl)[WanRx]#permit ip 97.123.111.0 0.0.0.255 host 193.14.2.11
3210(pf-acl)[WanRx]#deny ip any any
3210(pf-acl)[WanRx]#exit
3210(cfg)#
Access control list configuration task list
Command
on page 71.
6 • Access control list configuration
Purpose
Creates an IP access of control list
entry that denies access defined
according to the command
options
"Link scheduler
62