If ACLs are applied at multiple levels within a single context (such as an ACL is applied to an interface within
the context and another ACL is applied to the entire context), they will be processed as shown in the following
figure and table.
Figure 18: ACL Processing Order
Table 37: ACL Processing Order Descriptions
Packet coming from the mobile node to the packet data network (left to right)
Description
Order
An inbound ACL configured for the receiving interface in the Source Context is applied to
the tunneled data (such as the outer IP header). The packet is then forwarded to the Destination
Context.
1
An inbound ACL configured for the subscriber (either the specific subscriber or for any
subscriber facilitated by the context) is applied.
2
A context ACL (policy ACL) configured in the Destination Context is applied prior to
forwarding.
3
An outbound ACL configured on the interface in the Destination Context through which the
packet is being forwarded, is applied.
4
Packet coming from the packet data network to the mobile node (right to left)
DescriptionOrder
An inbound ACL configured for the receiving interface configured in the Destination Context
is applied.
1
An outbound ACL configured for the subscriber (either the specific subscriber or for any
subscriber facilitated by the context) is applied. The packet is then forwarded to the Source
Context.
2
A context ACL (policy ACL) configured in the Source Context is applied prior to forwarding.3
An outbound ACL configured on the interface in the Source Context through which the
packet is being forwarded, is applied to the tunneled data (such as the outer IP header).
4
ASR 5500 System Administration Guide, StarOS Release 21.4
253
Access Control Lists
Applying IP ACLs
To Next Page
Loading...
Need help?
General
