Hirschmann MACH 4000 User Manual

Protection from unauthorized access
Basic - L3P
Release 4.0 11/07
6.6 Access Control Lists (ACL).
25
ACL 100 contains the rule "permit all" at the end. Thus the ACLs 102 and 104
are never applied. You can use the sequence number to influence the se-
quence for processing the ACLs (see on page 26 "Specifying the sequence
of the rules").
enable Switch to the Priviledged EXEC mode.
configure Switch to the Configuration mode.
access-list 104 permit udp
any any eq snmp assign
-queue 5
Create the extended ACL 104 with the first rule.
This rule assigns priority 5 to all SNMP packets
with the UDP destination port (=161).
This rule overwrites any priority contained in a
VLAN tag with the value 5, and also overwrites the
IP-DSCP value with cs5.
exit Switch to the Priviledged EXEC mode.
show ip access-lists 104 Displays the rules of ACL 104.
ACL ID: 104
Rule Number: 1
Action......................................... permit
Match All...................................... FALSE
Protocol....................................... 17(udp)
Destination L4 Port Keyword.................... 161(snmp)
Assign Queue................................... 5
configure Switch to the Configuration mode.
interface 2/1 Switch to the Interface Configuration mode of
interface 2.1.
ip access-group 104 in Attaches ACL 104 to interface 2.1.
exit
Switch to the Configuration mode.
exit Switch to the Priviledged EXEC mode.
show access-lists interface
2/1 in
Display the ACLs attached to interface 2.1 for re-
ceived data packets.
ACL Type ACL ID Sequence Number
-------- ------------------------------- ---------------
IP 100 1
IP 102 3
IP 104 4

Hirschmann MACH 4000 Specifications

General

Brand	Hirschmann
Model	MACH 4000
Category	Network Router
Language	English