Avaya ERS 45 Series - 8 Cisco to Avaya Comparison

Avaya Inc. – External Distribution
58
avaya.com
September 2015
8. Cisco to Avaya Comparison
This section compares various Cisco IOS ACL commands into their Avaya equivalents.
Config Task
Description
Cisco IOS
Avaya ACLI
Deny src-ip 192.168.1.0/24
Allow everyone else
access-list <1> deny
<192.168.1.0> <0.0.0.255>
access-list <1> permit any
qos traffic-profile classifier name <one> src-ip
<192.168.1.0/24> drop-action <enable> block
<one>
Apply ACLs to interfaces
interface range <gi1/0/1 - 20>
ip access-group <1> in
exit
qos traffic-profile set port <1-20> name <one>
show qos traffic-profile set
Permit SMTP connection
from any host to mail server
access-list <100> permit tcp any
host <10.1.1.1> eq smtp
qos traffic-profile classifier name <one> dst-ip
<10.1.1.1/32> protocol <6> dst-port-min <25> dst-
port-max <25> block <one>
Permit TCP connections to
port range between 1024
and 2024 to subnet
10.1.1.0/24
access-list <100> permit tcp any
<10.1.1.0> <0.0.0.255> range
<1024> <2024>
qos traffic-profile classifier name <one> src-ip
10.1.1.1/32> protocol <6> src-port-min <1024>
src-port-max <2048> block <one>
Permit UDP connections to
port range between 1024
and 2024 to subnet
10.1.1.0/24
access-list <100> permit udp any
<10.1.1.0> <0.0.0.255> range
<1024> <2024>
qos traffic-profile classifier name <one> src-ip
10.1.1.1/32> protocol <17> src-port-min <1024>
src-port-max <2048> block <one>
Bootps
10 permit udp any any eq bootps
qos traffic-profile classifier name <one> addr-type
<ipv4> protocol <17> dst-port-min <67> dst-port-
max <67> block one
Bootpc
20 permit udp any any eq bootpc
qos traffic-profile classifier name <one> addr-type
<ipv4> protocol <17> dst-port-min <68> dst-port-
max <68> block one
IP Range
30 deny ip 10.57.240.0 0.0.1.255
host 128.1.0.1
qos traffic-profile classifier name <one> src-ip
<10.57.240.0/24> dst-ip <128.1.0.2/32> drop-
action enable block <one>
qos traffic-profile classifier name <one> src-ip
<10.57.241.0/24> dst-ip <128.1.0.2/32> drop-
action enable block <one>
IP Range
110 permit ip host 10.57.240.1
10.0.0.0 0.255.255.255
qos traffic-profile classifier name <one> src-ip
<10.57.240.1/32> dst-ip <10.0.0.0/8> block <one>