User Manual

Chapter 3 - Operation and Administration of the Macro BTS NPU Configuration
4Motion 206 System Manual
 “Deleting a Permit/Deny Rule for Specific Protocols/IP Addresses (Extended
Mode)” on page 209
3.4.10.1.3.1.1Creating a Permit/Deny Rule for Specific Protocols/IP Addresses
(Extended Mode)
You can create the Permit or Deny rule for traffic from/to a source/ destination IP
address/subnet with respect to the following protocols:
 IP
 OSPF
 Protocol Independent Multicast (PIM)
 Any other protocol
Run the following commands to create the Permit/Deny rule for traffic from and to
a specific IP address/subnet for a particular protocol:
npu(config-ext-nacl)# permit {ip | ospf | pim | <protocol-type
(1-255)>} {any | host <src-ip-address> | <src-ip-address> <mask>}
{any | host <dest-ip-address> | <dest-ip-address> <mask>}
npu(config-ext-nacl)# deny {ip | ospf | pim | <protocol-type
(1-255)>} {any | host <src-ip-address> | <src-ip-address> <mask>}
{any | host <dest-ip-address> | <dest-ip-address> <mask>}
In the above commands, it is mandatory to specify the protocol and source IP
address for which the Permit/Deny rule is to be created. If you do not specify the
destination IP address/subnet mask, by default, traffic to all destination IP
addresses is permitted/denied.
The following table lists the parameters and their descriptions in these
commands: