Allied Telesis AT-FS970M Series User Manual

Page 1591

Text mode
Original mode

AT-FS970M Switch Command Line User’s Guide

1591

This example discards tagged packets from UDP ports 67 to 87 if they are
from the 154.11.234.0 network and are going to the 154.11.235.0 network,
and have a VID of 20. Then the ACL is assigned to port 8:

awplus> enable
awplus# configure terminal
awplus(config)# ip access-list denyudp2
awplus(config-ip-acl)# deny udp 154.11.234.0/24 range 67 87
154.11.235.0/24

range 67 87 vlan 20

awplus(config-ip-acl)# exit
awplus(config)# interface port1.0.8
awplus(config-if)# access-group denyudp2

This example creates a deny access list called “udpdeny” that discards all
tagged ingress UDP packets from the 152.12.45.0/16 subnet. Then the
ACL is assigned to port 1:

awplus> enable
awplus# configure terminal
awplus(config)# ip access-list udpdeny
awplus(config-ip-acl)# deny udp 152.12.45.0/16 any
awplus(config-ip-acl)# exit
awplus(config)# interface port1.0.1
awplus(config-if)# access-group udpdeny