Allied Telesis SwitchBlade x3100 Series Manual page 595

Configuring ACL
TABLE 6-5
Step Command
Create the ACCESSLIST stb_range to PERMIT the IP address range.
CREATE ACCESSLIST stb_range RULE=PERMIT IPSOURCE=172.16.5.0
1
SOURCEMASK=255.255.255.240
SHOW ACCESSLIST stb_range
--- Access Lists --------------------------------------------------------------
Name
---------------- ---------------- ---- ------- -------------------------------
stb_range
Since all other packets are dropped, add rule to the stb_range to allow ARP packets through.
ADD ACCESSLIST stb_range RULE=PERMIT PROTOCOL=0x806
2
// 0x806 is the protocol-type for ARP
SHOW ACCESSLIST stb_range
--- Access Lists ----------------------------------------------------------
Name
--------- -------------- ---- ------- ------------------------------- ----
stb_range
If needed, deny a type of packet from the approved range by placing a new rule at a higher precedence. than the Ip
address rule.
ADD ACCESSLIST stb_range RULE=DENY APPLICATION=NETBIOS BEFORE=1//ipaddress
3
rule
SHOW ACCESSLIST stb_range
--- Access Lists ----------------------------------------------------------
Name
--------- -------------- ---- ------- ------------------------------- ----
stb_range
Add the ACCESSLIST stb_range to an interface or set of interfaces.
Software Reference for SwitchBlade x3100 Series Switches (Access and Security)
Configuration Procedure for ACL
Interfaces Rule Action
1 PERMIT
-- DENY //
Interfaces
1
Interfaces
1
Description (Optional)
Fields
IPSOURCE=172.16.5.0
SOURCEMASK=255.255.255.240
all other packets dropped
Rule Action Fields
PERMIT IPSOURCE=172.16.5.0
SOURCEMASK=255.255.255.240
2 PERMIT PROTOCOL=2054
-- DENY
Rule Action Fields
DENY APPLICATION=NETBIOS
2 PERMIT IPSOURCE=172.16.5.0
SOURCEMASK=255.255.255.240
3 PERMIT PROTOCOL=2054
-- DENY
Introduction
a
6-35