ACL
ACL filter policies, also referred to as Access Control Lists (ACLs) or just ‟filters”, are sets of ordered rule entries that specify packet match criteria and actions to be performed to a packet upon a match. Filter policies are created with a unique filter ID and filter name. After the filter policy is created, the policy must be associated with services.
See "Filter policies" in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Router Configuration Guide for detailed information about ACL.
See the applicable section for each service type for examples of applying ACL to that specific service type.
See ACL for information about relevant ACL show commands.
The following is an example of an IPv4 ACL.
/configure filter ip-filter "Epipe-ACL" filter-id 101
/configure filter ip-filter "Epipe-ACL" entry 10 match protocol icmp
/configure filter ip-filter "Epipe-ACL" entry 10 match dst-ip address 192.168.10.2
/configure filter ip-filter "Epipe-ACL" entry 10 match dst-ip mask 255.255.255.255
/configure filter ip-filter "Epipe-ACL" entry 10 action accept
The ACL is applied to the service SAP in either ingress or egress direction.
/configure service epipe "Epipe-VLAN100" sap 1/1/c10/1:100 ingress filter ip "Epipe-ACL"