Hirschmann PowerMICE User Manual

Assistance in the Protection from Un-
authorized Access
118
6.8 Access Control Lists (ACL)
UM Basic Configuration L3P
Release 7.1 12/2011
Example: Extended ACL with prioritizing using the Simple Network
Management Protocol (SNMP, Layer 4)
ACL 100 contains the rule “permit all” at the end. Thus the ACLs 102 and 104
are never applied. You can use the sequence number to alter the sequence
for processing the ACLs (see on page 119 “Specifying the Sequence of the
Rules”).
enable Switch to the privileged EXEC mode.
configure Switch to the Configuration mode.
access-list 104 permit udp
any any eq snmp
assign-queue 5
Create the extended ACL 104 with the first rule.
This rule assigns priority 5 to all SNMP packets
with the UDP destination port (=161).
This rule overwrites any priority contained in a
VLAN tag with the value 5, and also overwrites the
IP-DSCP value with cs5.
exit Switch to the privileged EXEC mode.
show ip access-lists 104 Displays the rules of ACL 104.
ACL ID: 104
Rule Number: 1
Action......................................... permit
Match All...................................... FALSE
Protocol....................................... 17(udp)
Destination L4 Port Keyword.................... 161(snmp)
Assign Queue................................... 5
configure Switch to the Configuration mode.
interface 2/1 Switch to the Interface Configuration mode of
interface 2.1.
ip access-group 104 in Attaches ACL 104 to interface 2.1.
exit Switch to the Configuration mode.
exit Switch to the privileged EXEC mode.
show access-lists interface
2/1 in
Display the ACLs attached to interface 2.1 for
received data packets.
ACL Type ACL ID Sequence Number
-------- ------------------------------- ---------------
IP 100 1
IP 102 3
IP 104 4

Hirschmann PowerMICE Specifications

General

Brand	Hirschmann
Model	PowerMICE
Category	Network Router
Language	English