Orion A10E - Page 168

Orion Networks
A10E/A28E/A28F Configuration Guide
6 Security
Orion Networks
148
Step
Configuration
Description
1
Alpha-A28E#config
Enter global configuration mode.
2
Alpha-A28E(config)#access-
list-map acl-id { deny |
permit }
Create MAP ACL list and enter
ACLMAP configuration mode.
3
Alpha-A28E(config-
aclmap)#match mac
{ destination | source } mac-
address
(Optional) define match rule for source
or destination MAC address.
4
Alpha-A28E(config-
aclmap)#match cos cos-value
(Optional) define match rule for Cos
value.
5
Alpha-A28E(config-
aclmap)#match ethertype
ethertype [ ethertype-mask ]
(Optional) define match rule for
Ethernet frame type.
6
Alpha-A28E(config-
aclmap)#match { arp | eapol |
flowcontrol | ip | ipv6 |
loopback | mpls | mpls-mcast |
pppoe | pppoedisc | x25 |
x75 }
(Optional) define match rule for upper
layer protocol type carried by laryer-2
packets head.
7
Alpha-A28E(config-
aclmap)#match arp opcode
{ reply| request }
(Optional) define match rule for ARP
protocol type (reply packet/request
packet).
8
Alpha-A28E(config-
aclmap)#match arp { sender-mac
| target-mac } mac-address
(Optional) define match rule for MAC
address of ARP packet.
9
Alpha-A28E(config-
aclmap)#match arp { sender-ip
| target-ip } ip-address [ ip-
address-mask ]
(Optional) define match rule for IP
address of ARP packet.
10
Alpha-A28E(config-
aclmap)#match ip
{ destination-address |
source-address } ip-address
[ ip-address-mask ]
(Optional) define match rule for source
or destination IP address.
11
Alpha-A28E(config-
aclmap)#match ip precedence
{ precedence-value | critical
| flash | flash-override |
immediate| internet | network
| priority | routine }
(Optional) define match rule for IP
packet priority.
12
Alpha-A28E(config-
aclmap)#match ip tos { tos-
value | max-reliability | max-
throughput | min-delay | min-
monetary-cost | normal }
(Optional) define match rule for ToS
value of IP packet priority.