Standard ACL Instance
16-5
Whenever the interface receives the packet, its content is checked against all the ACEs
in the ACL. It is allowed/denied based on the ACL configuration.
16.1.2.1 Example - Denying Traffic to the Interface
The example below denies all traffic entering the interface (a log message is generated
whenever the interface receives a packet):
RFSwitch(config-std-nacl)#deny any log rule-precedence 50
RFSwitch(config-std-nacl)#
16.1.2.2 Example - Denying Traffic only from Source Network
The example below denies traffic from the source network (xxx.xxx.1.0/24) and allows
all other traffic to flow through the interface:
RFSwitch(config-std-nacl)#deny xxx.xxx.1.0/24 rule-
precedence 60
RFSwitch(config-std-nacl)#permit any
NOTE: The log option is functional only for router ACL’s. The log option
results in an informational logging message for the packet matching the
entry sent to the console.
To Next Page
Loading...
