User`s manual

User's Manual 6. Configuring the MediaPack
Version 2.2 133 July 2007
Table 6-22: Access Control List Parameters Description
Parameter Description
Port Match Criteria
It the rule applies to TCP or UDP packets, the user can specify a TCP or UDP port
match criteria. The following criteria can be defined:
 None: no port matching is performed
 Equal: The rule matches if the port specified in Port Number is used.
 Less than: The rule matches if the port of the packet is smaller than the port
specified in the ‘Port Number’ field
 Greater Than: The rule matches if the port of the packet is greater than the
port specified in the ‘Port Number’ field.
 Range: The rule matches if the port of the packet is in the range specified by
the ‘Port Number’ and the ‘Port End Range’
Port Number
Specify the port number to match. For more information see above
Port End Range
This field is only valid if range is selected. For more information see ‘Port Match
Criteria’
Destination Settings
The Destination settings are identical to the source settings.
Class Of Service
CoS Name
As described above, the ACL can be used to assign a QoS Class of service to a
packet. This filed specifies the class of service to be applied to the packet.
Specifying a class of service is only possible on permit rules.
Using CLI
To change Access Control list using the CLI:
1. Log on to the system.
2. Change to the configuration mode.
3. From the main configuration mode, change to the “profile acl” mode.
4. To enter the "profile acl" mode, use the command:
profile acl <wanIn | wanOut>.
Where <wanIn> specifies an inbound rule and <wanOut> specifies an outbound rule.
5. Start the command with permit or deny.
6. Select the type of the rule ‘IP’, ‘TCP’, ‘UDP’
7. Enter an IP address to start a range match Enter ‘any’ to skip destination matching or enter ‘host’ to specify a
host matching rule.
8. If range matching is used, continue with the wildcard specification.
9. If 'any' is selected, continue with source matching.
10. If host is selected, enter a host IP address.
11. If TCP or UDP was selected begin with the port matching. If IP was selected continue with the source
matching. If TCP or UDP was selected and port matching is not used continue with the source matching.
12. Source matching is identical to destination matching.
13. At the end, specify the QoS class of service (CoS) for this packet (this is only allowed for permit rules).
Following are a few samples:
permit tcp any any cos local-voice # assign local voice to all packets
permit ip 10.0.0.1 0.0.0.255 any cos local-voice # permit ip addresses in the range from 10.0.0.0-10.0.0.255