Brocade Network OS NETCONF Operations Guide v4.1.1 - Manual (Page 447)

Network OS NETCONF Operations Guide 415
53-1003231-02
IP ACL
28
a. In the element, set a sequence number for the rule to identify the rule and
determine the sequence in which rules are applied (lowest first).
b. In the element, specify “deny” to create a rule in the IP ACL to drop traffic with
the source IP address, “permit” to create a rule in the IP ACL to permit traffic with the
source IP address, or “hard-drop” to create a rule in the IP ACL to force drop traffic.
c. In the element, specify “any” to permit or deny traffic from any source
IP address, or “host” to permit or deny traffic from a specific IP address.
d. In the element, specify the IP address of source traffic to be permitted or
denied if “host” is specified in the element.
For a complete list of node leaf elements, refer to the brocade-ip-access-list.yang file or
the brocade-ipv6-access-list.yang file.
The following example creates an extended IP ACL named stdACL3 that includes the following
rules:
• Rule 5 permits traffic from host 10.20.33.4.
• Rule 15 denies traffic from any source.
stdACL3
5
permit
host
10.20.33.4
15
deny
any