Supermicro SSE-F3548S/SSE-F3548SR Configuration User’s Guide
IP Extended ACLs with UDP rules display the following fields:
SMIS# show access-lists ext-ip 200
Extended IP Access List 200
-----------------------------
Filter Priority : 1
Filter Protocol Type : UDP
Source IP address : 0.0.0.0
Source IP address mask : 0.0.0.0
Destination IP address : 172.100.0.0
Destination IP address mask : 255.255.0.0
In Port List : ALL
Out Port : ALL
Filter TOS :
Filter DSCP :
Filter Source Ports From : 0
Filter Source Ports Till : 65535
Filter Destination Ports From : 1001
Filter Destination Ports Till : 65535
Filter Action : Deny
Status : Active
8.4 IP Extended ACL Configuration Example 1
This example describes the commands required to implement the following ACL requirements on the
network setup shown in Figure ACL-3.
ACL 1 – Allow SMTP TCP traffic fromthe 172.20.0.0 network and deny all other TCP traffic from this
network.
ACL 2 – Redirect all ICMP traffic destined to the IP 172.10.0.0 network to server 172.10.10.10.
ACL 3 –Deny all UDP traffic going to 172.100.0.0 with a destination UDP port greater than 1000.
Figure ACL-3: IP Extended ACL Example 1
To Next Page
Loading...
