Blade ICE G8000 - Manual (Page 102)

RackSwitch G8000 Application Guide
102 „ Chapter 6: Quality of Service BMD00041, November 2008
Example 3
Use this configuration to block traffic from a network that is destined for a specific egress port.
All traffic that egresses port 6 from the network 100.10.1.0/24 is denied.
1. Configure an Access Control List.
2. Add the ACL to port 6.
Example 4
Use this configuration to block HTTP traffic on a port.
1. Configure an Access Control List.
2. Add the ACL to a port.
RS G8000 (config)# ip access-list ip extended 1001
RS G8000 (config-ext-nacl)# deny ip 100.10.1.0 255.255.255.0 any
RS G8000 (config-ext-nacl)# exit
RS G8000 (config)# interface port 6
RS G8000 (config-if)# ip access-group 1001 out
RS G8000 (config-if)# exit
RS G8000 (config)# access-list ip extended 1002
RS G8000 (config-ext-nacl)# deny tcp any any eq 80
RS G8000 (config-ext-nacl)# exit
RS G8000 (config)# interface port 12
RS G8000 (config-if)# ip access-group 1002 in
RS G8000 (config-if)# exit