User`s guide

204 XgOS User’s Guide • September 2014
3. Create an ACL and assign it a name:
No auto commits exist for ACLs. You must issue commit (see Step 5) after the
ACL is defined completely.
4. Define the ACL condition and action.
The ACL names and rule numbers must match. All matched port 80 traffic in the
egress direction will be restricted down to 100 Mbps by the QoS policer
(test/100mhttp) configured in the earlier step:
5. Issue the commit after you are finished creating the ACL, setting the action, and
setting the condition:
6. Assign the ACL to the I/O card:
7. Inspect the applied ACL settings.
If the destination port matches 80, the traffic is allowed to pass through but it will
be policed based on the policy test/100mhttp:
8. Inspect the applied I/O card settings.
The “a” in the “enables” row means an ACL is assigned to the I/O card. A “q”
means a QoS policy is assigned to the card:
add acl web100m
Warning: ACLs are not autocommitted. You will need to enter
'commit' when the ACL is complete
set acl web100m rule 1 condition dest port exactly 80
set acl web100m rule 1 action police test/100mhttp
commit
Are you sure you want to commit these changes (y/n)?y
set ethernet-card 1 acl -set=web100m
show acl
name rule rank descr conditions action
----------------------------------------------------------------------------
web100m 1 0 dest port exactly 80 allow, forget, police=test/100mhttp
1 record displayed
show iocard 1
--------------------------------------
slot 1
state up/up