Chapter 33: Access Control Lists
STANDARD Revision 1.0 C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved. 955
Example 1
Objective - To permit membership only in the 239.255.0.0/16 range for cable-mac 1.0:
The following command permits any joins in the 239.255.X.X range:
configure access-list 10 permit 239.255.0.0 0.0.255.255
There is an implicit deny to any other multicast IP ranges.
The following command applies the ACL to the IGMP-configured interface:
configure interface cable-mac 1.0 ip igmp access-group 10
Example 2
Objective - To deny any joins in the 225.0.0.X range and permit all other multicast ranges for cable-mac 1.0:
The following command denies any joins in the 225.0.0.X range:
configure access-list 10 deny 225.0.0.0 0.0.0.255
The following command permits membership in any other multicast IP range:
configure access-list 10 permit any
There is an implicit deny to any other multicast IP ranges.
The following command applies the ACL to the IGMP-configured interface:
configure interface cable-mac 1.0 ip igmp access-group 10
IPv6 ACLs
Note: IPv6 ACLs are limited to include entries with Source IP only. The C4/c CMTS does not support IPv6 ACL entries with
any other match criteria. IPv6 Access Control Lists can only be configured with an access list name. An ACL number cannot
be used to configure an IPv6 ACL.
IPv6 ACLs are assigned an access list name rather than a number by the operator. A number from 200-399 is automatically
generated by the C4/c CMTS. Use the following command to define an IPv6 ACL:
configure ipv6 a
ccess-list <a
ccess-list-name> [<in
dex>]{permit | deny} {<so
urce-
ipv6-
address>/<prefix-length>| any} [remark <remark-text>]
To Next Page
Loading...
Need help?
General
