Brocade Network OS NETCONF Operations Guide v4.1.1 - Manual (Page 437)

Network OS NETCONF Operations Guide 405
53-1003231-02
Chapter
28
Configuring ACLs
In this chapter
• ACL configuration with NETCONF overview . . . . . . . . . . . . . . . . . . . . . . . . . 405
• Default ACL configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 405
• ACL configuration and management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 406
• IP ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 414
ACL configuration with NETCONF overview
This chapter provides procedures for configuring MAC access control lists (ACLs) and IP ACLs using
the NETCONF interface. Refer to the Network OS Administrator’s Guide for the following related
information:
• An overview of ACLs
• Configuration guidelines and restrictions
Through the NETCONF interface, you can perform the following operations on ACLs:
• Use the remote procedure call (RPC) to configure an ACL.
• Use the custom RPC to obtain MAC ACLs applied to an interface.
• Use the RPC to validate configuration settings.
MAC ACL parameters are defined in the brocade-mac-access-list YANG module. IP ACL parameters
are defined in the brocade-ip-access-list YANG module. IPv6 ACL parameters are defined in the
brocade-ipv6-access-list YANG module. For a structural overview of these YANG modules, refer to
the Network OS YANG Reference Manual. For an explanation of each parameter, refer to the
brocade-mac-access-list.yang file, the brocade-ip-access-list.yang file, and the
brocade-ipv6-access-list.yang file.
Default ACL configuration
When none of the policies is enforced on the switch, these default ACL rules are effective in
Network OS:
• seq 0 permit tcp any any eq 22
• seq 1 permit tcp any any eq 23
• seq 2 permit tcp any any eq 897
• seq 3 permit tcp any any eq 898
• seq 4 permit tcp any any eq 111
• seq 5 permit tcp any any eq 80