Specifications

SSR Command Line Interface Reference Manual 297
ip-policy deny
in which the statement is evaluated. Possible values are 1-65535. The ip-policy
statement with the lowest sequence number is evaluated first.
Restrictions
ACLs for non -IP protocols cannot be used for IP policy routing.
Examples
To create a profile called “prof1” for telnet packets from 9.1.1.5 to 15.1.1.2:
Note:
See “acl permit|deny ip” on page 45 for more information on creating profiles for
IP policy routing.
To create an IP policy called “p3” that prevents packets matching prof1 (that is, telnet
packets from 9.1.1.5 to 15.1.1.2) from being forwarded using an IP policy:
To create a policy called “p4” that prevents all packets that have not been specifically
permitted to use policy-based routing (using the ip-policy permit command) from being
forwarded using an IP policy:
ssr(config)# acl prof1 permit ip 9.1.1.5 15.1.1.2 any any telnet 0
ssr(config)# ip-policy p3 deny acl prof1
ssr(config)# ip-policy p4 deny acl everything-else