Avaya P580 - Manual (Page 317)

Avaya P550R, P580, P880, and P882 Multiservice Switch User Guide, v5.3.1 9-31
Configuring IP Routing
7. Enter the destination address (10.1.1.0) and the destination
address wildcard (0.0.0.255), respectively, in the Dest
Address field.
8. Click CREATE to save your changes, or CANCEL to restore
previous settings. Once you create both access rules, all traffic
between subnet 10.1.1.0 and 10.1.2.0 is deny/filtered.
* Note: Traffic between any other 10.1.x.0 subnets are
not filtered because the access rules only deny/
filter traffic between subnets 10.1.1.0 and
10.1.2.0.
To deny/filter traffic to a specific address and not
to an entire subnet, you must specify the
destination IP address of the network node, and
use a subnet wildcard of 0.0.0.0.
To deny/filter all traffic, you must specify a
destination address of 0.0.0.0 and a wildcard of
255.255.255.255. This is useful if you want to
filter all traffic except traffic that matches a
previous rule. Ensure that you do not make this
your first rule, since ACL rules are read from the
top down and stop after the first rule match,
which ignores all subsequent rules.
Optimizing Performance when Using an Access Control List
* Note: This section provides a detailed discussion of the
architecture and functionality of the Avaya Multiservice
switch with respect to ACLs. This material goes well
beyond standard configuration issues by addressing
system performance, memory management and
optimization.
Purpose
The purpose of this section is to explain the configuration options
when using Access Lists. Deploying an Access List affects the use of
hardware and software resources and may impact system
performance. An Access Control List (ACL), also referred to as an
Access List, is a tool for associating rules (permit, deny, prioritize for
Quality of Service (QoS)) with identified IP traffic through the
switch. This section will show how to monitor performance and
adjust configurations to optimize performance.