Specifications

Chapter 1: acl Commands
1 - 8 SSR Command Line Interface Reference Manual
acl permit|deny igmp
Purpose
Create an IGMP ACL.
Format
acl <
name>
permit|deny igmp
<SrcAddr/Mask> <DstAddr/Mask>
Mode
Configure
Description
The
acl permit igmp
and
acl deny igmp
commands define an ACL to allow or
block IGMP traffic from entering or leaving the SSR. For each of the values describing
a flow, you can use the keyword
any
to specify a wildcard (“don’t care”) condition. If
you do not specify a value for a field, the SSR applies a wildcard condition to the field,
giving the same effect as if you specify the
any
keyword.
<name>
Name of this ACL. You can use a string of characters or a
number.
<SrcAddr/Mask>
The source address and the filtering mask of this flow. If the
source address is a network or subnet address, you must sup-
ply the filtering mask. Generally, the filtering mask is the net-
work mask of this network or subnet. If the source address is
that of a host then no mask is required. By default, if a mask
is not supplied, the source address is treated as that of a host.
You can specify the mask using the traditional IP address for-
mat (“255.255.0.0”) or the CIDR format (“/16”).
<DstAddr/Mask>
The destination address and the filtering mask of this flow. The same
requirements and restrictions for
<SrcAddr/Mask>
apply to
<DstAddr/Mask>
.
Restrictions
When you apply an ACL to an interface, the SSR appends an implicit deny rule to that
ACL. The implicit deny rule denies all traffic. If you intend to allow all traffic that
doesn’t match your specified ACL rules to go through, you must explicitly define a rule
to permit all traffic.