Specifications
Table Of Contents
- Title Page
- Notice
- Contents
- acl Commands
- acl-edit Commands
- aging Commands
- arp Commands
- cli Commands
- configure Command
- copy Command
- dvmrp Commands
- enable Command
- erase Command
- exit Command
- file Commands
- filters Commands
- http Commands
- igmp Commands
- interface Commands
- ip Commands
- ip-router Commands
- Command Summary
- ip-router authentication add key-chain
- ip-router authentication create key-chain
- ip-router global add
- ip-router global set
- ip-router global set trace-options
- ip-router global set trace-state
- ip-router global use provided_config
- ip-router kernel trace
- ip-router policy add filter
- ip-router policy add optional-attributes-list
- ip-router policy aggr-gen destination
- ip-router policy create aggregate-export-source
- ip-router policy create aggr-gen-dest
- ip-router policy create aggr-gen-source
- ip-router policy create aspath-export-source
- ip-router policy create bgp-export-destination
- ip-router policy create bgp-export-source
- ip-router policy create bgp-import-source
- ip-router policy create direct-export-source
- ip-router policy create filter
- ip-router policy create optional-attributes-list
- ip-router policy create ospf-export-destination
- ip-router policy create ospf-export-source
- ip-router policy create ospf-import-source
- ip-router policy create rip-export-destination
- ip-router policy create rip-export-source
- ip-router policy create rip-import-source
- ip-router policy create static-export-source
- ip-router policy create tag-export-source
- ip-router policy export destination
- ip-router policy import source
- ip-router policy redistribute
- ip-router show configuration file
- ip-router show state
- ipx Commands
- l2-tables Commands
- logout Command
- multicast Commands
- mtrace Command
- negate Command
- no Command
- ospf Commands
- Command Summary
- ospf add interface
- ospf add nbma-neighbor
- ospf add network
- ospf add stub-host
- ospf add virtual-link
- ospf create area
- ospf create-monitor
- ospf monitor
- ospf set area
- ospf set ase-defaults
- ospf set export-interval
- ospf set export-limit
- ospf set interface
- ospf set monitor-auth-method
- ospf set trace-options
- ospf set virtual-link
- ospf show
- ospf start|stop
- ping Command
- port Commands
- qos Commands
- reboot Command
- rip Commands
- save Command
- show Command
- snmp Commands
- statistics Commands
- stp Commands
- system Commands
- Command Summary
- system image add
- system image choose
- system image delete
- system image list
- system promimage upgrade
- system set bootprom
- system set contact
- system set date
- system set dns
- system set location
- system set name
- system set password
- system set poweron-selftest
- system set syslog
- system set terminal
- system show
- traceroute Command
- vlan Commands
Chapter 1: acl Commands
1 - 4 SSR Command Line Interface Reference Manual
acl apply service
Purpose
Apply an ACL to a service on the SSR.
Format
acl
<name>
apply service
<ServiceName>
[logging [on|off]]
Mode
Configure
Description
The
acl
apply
service
command applies a previously defined ACL to a service
provided by the SSR. A service is typically a server or agent running on the SSR, for
example, a Telnet server or SNMP agent. By applying an ACL to a service, you can
control which host can access individual services on the SSR. This type of ACL is
known as a Service ACL. It does not control packets going through the SSR. It only
controls packets that are destined for the SSR, specifically, one of the services
provided by the SSR. As a result, a Service ACL, by definition, is applied only to
check for inbound traffic to the SSR. In addition, if a Service ACL is defined with
destination address and port information, that information is ignored. The
destination host of a Service ACL is by definition the SSR. The destination port is
the well-known port of the service.
When you apply an ACL, you also can enable ACL Logging by using the
logging
keyword. When you enable ACL Logging on an interface, the SSR displays ACL
Logging messages on the console. The ACL log provides information such as the
interface name, the ACL name, whether the packet is forwarded or not, and the internal
details of the packet.
Parameters
<name>
Name of the Service ACL. The ACL must already be defined.
To define an ACL, use one of the commands described in the
previous sections in this chapter.
<ServiceName>
Name of the service on the SSR to which you are applying the
ACL. Currently, the following services are supported:
• http
– HTTP web server
• snmp
– SNMP agent