Alcatel 9000 Guía de usuario descargar pdf (Pagina 503)

100

101

Using ACL Manager Configuring ACLs

OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006 page 25-19

Aclman#show ip access-list Test2

Extended IP access list Test2

10 permit udp host 198.172.10.4 any

20 permit tcp host 11.22.3.1 any

30 permit ip any 172.10.5.0 0.0.255.255

In the above example, the permit ip any any entry is removed from the Test2 extended ACL. A new

entry, permit ip any 172.10.5.0 0.0.255.255, is then added to the same ACL. Note that new entries are

added to the end of the access list by default. However, it is possible to specify a sequence number with

the new ACL statement to position the statement at a desired location within the ACL. For example,

Aclman(config)#ip access-list extended Test 2

Aclman(config-ext-nacl)#15 deny tcp any any

Aclman(config-ext-nacl)#end

Aclman#show ip access-list Test2

Extended IP access list Test2

10 permit udp host 198.172.10.4 any

15 deny tcp any any

20 permit tcp host 11.22.3.1 any

30 permit ip any 172.10.5.0 0.0.255.255

In the above example, the deny tcp any any entry was assigned sequence number 15, which positioned

the entry between statements 10 and 20.

Applying an ACL to an Interface

The interface command in the Global Configuration Mode is used to apply an ACL as an incoming or

outgoing filter to one or more switch interfaces. This command identifies the interface and then invokes

the Interface Configuration Mode to associate ACLs with the specified interface. For example, the follow-

ing commands apply the Test2 ACL to Ethernet port 3/2 to filter incoming traffic:

Aclman(config)#interface ethernet 3/2

Aclman(config-if)#ip access-group Test2 in

Note. Note that ACLs are not applied to the switch until they are associated with a switch interface.

Saving the ACL Configuration

The ACLMAN running configuration is maintained in memory only. To save this configuration use the

write memory command in the Privileged Exec Mode. When this command is invoked, ACLMAN writes

the ACL statements that comprise the running configuration to the aclman.cfg file, which is located in the

flash file system on the switch.

The aclman.cfg file is read by ACLMAN when the switch is rebooted or a configure replace command is

performed in the Privileged Exec Mode. See “Editing the ACLMAN Configuration File” on page 25-20

for more information.

Note. Issuing a write memory command is required to preserve the ACLMAN running configuration

across switch reboots.

1 2 ... 498 499 500 501 502 503 504 505 506 507 508 ... 701 702

Comentarios a estos manuales

Sin comentarios

Alcatel 9000 Guía de usuario Pagina 503

Comentarios a estos manuales

Relacionado con productos y manuales para Software Alcatel 9000