UMN:CLI User Manual
V8102
252
deny ip 10.12.154.0 0.0.0.255 10.12.202.0 0.0.0.255
ZebOS IP access list sample_ACL
permit 10.55.193.109/24
SWITCH(config)#
7.18.9 Access List ZeBos
access-list zebos command controls the transmission of packets on an interface and re-
strict contents of routing updates. The switch stops checking the access list after a match
occurs. The priority of an ACL is based on the order in which the access-list command
was configured.
• If the ACL as “deny” is configured, the label does not advertise to any peer.
• If the ACL as “no-match” is configured, then it applies the next advert-list and is inter-
preted as continue.
• If the ACL as “permit” is configured, and there is a peer ACL, then the label advertises
to all peers permitted by the peer ACL.
• If the ACL as “permit” is configured, but the peer prefix is “none,” then the label adver-
tises to all peers.
To create an access-list (ACL) to filter packets, use the following command.
access-list zebos WORD {deny |
permit} {ip | gre | igmp | pim |
rsvp | ospf | vrrp | ipcomp | any |
<0-255>} {SOURCE_ADDR | any}
{DESTINATION_ADDR | any}
Specifies a deny or permit statement of the Zebos ex-
tanded ACL with IP addresses.
WORD: access-list name
deny: denies packets if conditions are matched.
permit: permits packets if conditions are matched.
ip: IP packet
gre: Generic Routing Encapsulation packet.
igmp: Internet Group Management Protocol packet
pim: Protocol Independent Multicast packet
rsvp: Resource Reservaion Protocol packet
ospf: Open Shortest Path First packet
vrrp: Virtual Router Redundancy Protocol packet
ipcomp: IP payload compression packet.
any: any protocol packet
0-255: protocol number, instead of a named protocol
SOUR_ADDR: source IP address to match
(A.B.C.D/M)
SOUR_ADDR_RANGE: source IP address range to
match (A.B.C.D A.B.C.D)
DES_ADDR: destination IP address to match
(A.B.C.D/M)
DES_ADDR_RANGE: destination IP address range to
match (A.B.C.D A.B.C.D)
access-list zebos WORD {deny |
permit} {ip | gre | igmp | pim |
rsvp | ospf | vrrp | ipcomp | any |
<0-255>} {SOUR_ADDR |
SOUR_ADDR_RANGE | any}
{DES_ADDR |
DES_ADDR_RANGE | any} {label
<1-65535> | precedence <0-7> |
tos {<0-255> | range <0-255> <0-
255>} | pkt-size {lt <0-65535>| gt
<0-65535> | range <0-65535> <0-
65535>} | fragments | log | inter-
face {in | out} [{tengigabitether-
net IFPORT | gpon IFPORT |
channelgroup} IFPORT | vlan
VLANID}]
To Next Page
Loading...