Alcatel-Lucent OmniAccess 5740 - Page 508

Common Classifiers
Left running head:
Chapter name (automatic)
482
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Configuration Guide
Alcatel-Lucent
T
O CONFIGURE RULES FOR IP
E
XAMPLE
Ex 1:
The following example configures a IP rule with ‘any any’ and type ‘ftp’:
ALU(config-match-list-test)# ip any any
Ex 2:
These rules used in the match-list example below, once configured can be applied
to all/any applications just by referencing its name. You need not have to
repeatedly configure the match-list for every application.
ALU(config)# match-list 101
ALU(config-match-list-101)# 1 ip any prefix 10.0.0.0/8
ALU(config-match-list-101)# 2 ip prefix 21.1.1.0/24 host
41.2.2.2
Ex 3:
The power and flexibility of the rulesets can be best seen when the list references
are used, especially in multiple fields, e.g., the following configuration:
ALU(config)# list i1 prefix 10.0.0.0/8 prefix 11.0.0.0/8
ALU(config)# list i2 prefix 20.0.0.0/8 prefix 21.0.0.0/8
ALU(config)# match-list m1
ALU(config-match-list-m1)# 1 ip list i1 list i2
ALU(config-match-list-m1)# 2 ip list i1 list i2
ALU(config-match-list-m1)# 3 ip list i1 list i2
ALU(config-match-list-m1)# 4 ip list i1 list i2
Command (in Match-list CM) Description
[<1-1024>] ip {any|host <source ip-
address>|interface <name>|list
<name>|prefix <source ip-address/
prefix length>} {any|host
<destination ip-address>|interface
<name>|list <name>|prefix
<destination ip-address/prefix
length>} [dscp {<0-63>|<dscp-
mnemonics>}|fragment|ip-precedence
{<0-7>|<precedence-mnemonics>}
|length {<1-1500>
|{eq|ge|gt|le|lt|range <1-1500>}}
|tos {<0-15>|<tos-mnemonics>}]
This command is used to
configure rules for IP in a match-
list.
You can define a rule with
subnets, host addresses, or
interfaces or list of any of them.