Alcatel-Lucent AOS-W 6.5.3.x - Page 384

384| Roles and Policies AOS-W 6.5.3.x| User Guide
c. Click Add.
Configure the override local netdestination in the CLI
n Configure the local override netdestination
n Show the local override netdestination
n Local override netdestination used at AOS
To configure the local override netdestination:
(config) #netdestination store
(config-dest) #?
description Brief description about this destination (up to 128 characters in
quote)
host Configure a single IPv4 host
invert Use all destinations EXCEPT this destination
name Configure a single host name or domain, Max 63 characters
network Configure a IPv4 subnet
no Delete Command
range Configure a range of IPv4 addresses
(config-dest) #host ?
A.B.C.D IPv4 Address of host
vlan IPv4 Address based on VLAN
(config-dest) #host vlan ?
<1-4094> VLAN ID
(config-dest) #host vlan 55 ?
offset Offset in the VLAN subnet
(config-dest) #host vlan 55 offset ?
<1-254> Offset number in the VLAN subnet
(config-dest) #host vlan 55 offset 36
To show the local override netdestination
#show netdestination store
Name: store
Position Type IP addr Mask-Len/Range
-------- ---- ------- --------------
1 override vlan 55 offset 36
How to use the local-override netdestination alias in the switch:
(config) #ip access-list session store-override
(config-sess-store-override)#any alias store any permit
(config-sess-store-override)#alias store any any deny
(config-sess-store-override)#!
(config) #show ip interface brief
Interface IP Address / IP Netmask Admin Protocol
vlan 1 172.72.10.254 / 255.255.255.0 up up
vlan 55 55.55.55.1 / 255.255.255.0 up up
loopback unassigned / unassigned up up
(config) #show acl acl-table | include store-override 81 session 744 2 3 store-
override 0
(config) #show acl ace-table acl 81
744: any 55.55.55.36 255.255.255.255 0 0-0 0-0 f80001:permit
745: 55.55.55.36 255.255.255.255 any 0 0-0 0-0 f80000:deny
746: any any 0 0-0 0-0 f180000:deny
Creating an IPWhitelist
This features allow you to whitelist a range of IP addresses.