Motorola RF Switch CLI Reference Guide
15-10
Usage Guidelines
Use this command to deny traffic between networks/hosts based on the protocol type
selected in the access list configuration. The following protocol types are supported:
•ip
•icmp
•tcp
• udp
The last ACE in the access list is an implicit deny statement.
Whenever the interface receives the packet, its content is checked against the ACEs in the
ACL. It is allowed/denied based on the ACL configuration.
• Filtering TCP/UDP allows the user to specify port numbers as filtering criteria
• Select the ICMP as the protocol to allow/deny ICMP packets. Selecting icmp provides
the option of filtering icmp packets based on icmp type and code
15.1.2.1 Example - Denying Traffic Between Two Subnets
The following example denies traffic between two subnets:
RFSwitch(config-ext-nacl)#deny ip 192.168.2.0/24
192.168.1.0/24
RFSwitch(config-ext-nacl)#permit ip any any
RFSwitch(config-ext-nacl)#
15.1.2.2 Example - Denying TCP Based Traffic
The following example denies TCP traffic with a source port range between 20 - 23 (from
the source subnet to destination subnet):
RFSwitch(config-ext-nacl)#deny tcp range 20 23
192.168.1.0/24 192.168.2.0/24
RFSwitch(config-ext-nacl)#permit ip any any
RFSwitch(config-ext-nacl)#
NOTE: The log option is functional only for router ACL’s. The log option
displays an informational logging message about the packet that
matches the entry sent to the console.
To Next Page
Loading...
Need help?
General
