Specifications

Chapter 1: acl Commands
1 - 20 SSR Command Line Interface Reference Manual
are already defined as keywords. For example, for Telnet, you
can enter the port number 23 as well as the keyword
telnet
.
<DstPort>
For TCP or UDP, the number of the destination TCP or UDP
port. This field applies only to incoming TCP or UDP traffic.
The same requirements and restrictions for
<SrcPort>
apply
to
<DstPort>
.
<tos>
IP TOS (Type of Service) value. You can specify a TOS from
0 – 15.
Restrictions
When you apply an ACL to an interface, the SSR appends an implicit deny rule to that
ACL. The implicit deny rule denies all traffic. If you intend to allow all traffic that
doesn’t match your specified ACL rules to go through, you must explicitly define a rule
to permit all traffic.
Examples
Here are some examples of ACL commands for permitting and denying TCP traffic
flows.
ssr(config)# acl 100 permit tcp 10.21.33.0/255.255.255.0 any
Creates an ACL to permit TCP traffic from the subnet 10.21.33.0 (with a 24 bit
netmask) to any destination.
ssr(config)# acl noweb deny tcp any any http any
Creates an ACL to deny any incoming HTTP traffic.
ssr(config)# acl ftp100 permit tcp 10.31.34.0/24 10.31.60.0/24
20-21 any
Creates an ACL to permit FTP traffic (both command and data ports) from subnet
10.31.34.0 to 10.31.60.0.