Creating extended access rules – Lucent Technologies P550 User Manual

Page 136

Advertising
background image

Configuring IP Routing (Layer 3)

7-10

Cajun P550/P220 Switch Operation Guide

Creating Extended Access Rules

To create extended access rules:

1. In the IP Configuration section of the Web Agent window, click Access Lists.

The IP Access List dialog box opens.

Note: The IP Access List dialog box displays all standard and extended access rules

that have been created. If no rules have been created, the following
statement displays:

No IP Access Rules are currently

configured

.

2. Click Create Extended. The IP Extended Access Rule Creation dialog box opens.

3. Use Table 7-5 to configure your IP access rules to either filter or prioritize traffic:

Table 7-5. IP Extended Access Rule Creation Parameters

Parameter

Allows you to specify...

Access List Name

An alphanumeric name assigned to the newly-created access
list.

Access Rule Index

The sequence number for each new rule you create. Note that
rules may override each other, so review your current
configuration prior to creating new rules for an access list.

Access Type

The method of handling incoming datagrams based on the IP
access type you set. Priority levels include:

• Deny/Filter - Allows you to filter out traffic based on the

specified configuration.

• Permit/Fwd pri8 (high) to pri1 (low) - Allows you to

prioritize traffic based on the specified configuration.

• Permit/Fwd with no change in priority - Allows you to

forward traffic with no change in priority.

Source Subnet

Source Address - The IP address of a subnet that is denied

or granted access to the switch.

Source Wildcard - A range of IP addresses that are denied

or granted access to the switch. Place the number one (1)
in the bit positions you want to ignore.

Destination Subnet

Dest Address - The IP address of a subnet that is denied

or granted access to data from the switch.

Dest Address Wildcard - A range of IP addresses of

subnets that are denied or granted access to the switch.
Place the number one (1) in the bit positions you want to
ignore.

Protocol ID

A protocol ID to be filtered. (For example, ICMP=1, IGMP=2).
A single asterisk (*) indicates all protocols.

Advertising
This manual is related to the following products: