Configuring Action And Criteria For Subscriber Traffic; Configuring An Undefined Acl - Cisco ASR 5500 System Administration Manual
Hide thumbs
Also See for ASR 5500:
- Administration manual (410 pages) ,
- Installation manual (192 pages) ,
- Installation procedure overview (6 pages)
Table of Contents
Advertisement
Access Control Lists
Notes:
• The maximum number of ACLs that can be configured per context is limited by the amount of available
Configuring Action and Criteria for Subscriber Traffic
To create rules to deny/permit the subscriber traffic and apply the rules after or before action, enter the following
command sequence from the Exec mode of the system CLI:
configure
context acl_ctxt_name [ -noconfirm ]
Notes:
The system does not apply a "deny any" rule, unless it is specified in the ACL. This behavior can be
Caution
changed by adding a "deny any" rule at the end of the ACL.
• The maximum number of rules that can be configured per ACL varies depending on how the ACL is to
• Use the information provided in the
Configuring an Undefined ACL
As discussed previously the system uses an "undefined" ACL mechanism for filtering the packet(s) in the
event that an ACL that has been applied is not present. This scenario is likely the result of a mis-configuration
such as the ACL name being mis-typed during the configuration process.
For these scenarios, the system provides an "undefined" ACL that acts as a default filter for all packets into
the context. The default action is to "permit all".
To modify the default behavior for unidentified ACLs, use the following configuration:
configure
context acl_ctxt_name [-noconfirm]
Notes:
{ ip | ipv6 } access-list acl_list_name
end
memory in the VPN Manager software task. Typically, the maximum is less than 200.
{ ip | ipv6 } access-list acl_list_name
deny { ip_address | any | host | icmp | ip | log | tcp | udp }
permit { ip_address | any | host | icmp | ip | log | tcp | udp }
after { deny | permit | readdress | redirect }
before { deny | permit | readdress | redirect }
end
be used. For more information, refer to the Engineering Rules chapter.
For more information, refer to the ACL Configuration Mode Commands and IPv6 ACL Configuration
Mode Commands chapters in the Command Line Interface Reference.
access-list undefined { deny-all | permit-all }
end
Configuring Action and Criteria for Subscriber Traffic
Actions
and
Criteria
to configure the rules that comprise the ACL.
ASR 5500 System Administration Guide, StarOS Release 21.5
187
Advertisement
Table of Contents
Troubleshooting
