Specifications

acl apply interface
38 SSR Command Line Interface Reference Manual
input Applies the ACL to filter out inbound traffic.
output Applies the ACL to filter out outbound traffic.
logging on|off|deny-only|permit-only
Enables or disables ACL logging for this interface. You can specify one
of the following keywords:
off Disables all logging.
on Enables logging of packets that are dropped or forwarded
because of ACL.
deny-only Enables logging of dropped packets only.
permit-only Enables logging of forwarded packets only.
policy local|external
Allows or prevents an external agent from modifying or removing the
applied ACL. You can specify one of the following keywords:
local External agent cannot modify or remove the applied
ACL.
external External agent can modify or remove the applied ACL.
This is the default.
Restrictions
You can apply only one ACL of each type (IP or IPX) to an interface at one time. For
example, although you can define two ACLs, “ipacl1” and “ipacl2”, you cannot apply
them both to the same interface.
You can apply IP ACLs only to IP interfaces. Likewise, you can apply IPX ACLs only to
IPX interfaces.
Examples
To apply ACL “100” to interface int4 to filter out inbound traffic:
To apply ACL “nonfs” to interface int16 to filter out outbound traffic and enable logging:
ssr(config)# acl 100 apply interface int4 input
ssr(config)# acl nonfs apply interface int16 output logging on