User manual

Standard ACL Instance
15-5
Whenever the interface receives the packet, its content is checked against all the ACEs
in the ACL. It is allowed/denied based on the ACL configuration.
15.1.2.1 Example - Denying Traffic to the Interface
The example below denies all traffic entering the interface (a log message is generated
whenever the interface receives a packet):
RFSwitch(config-std-nacl)#deny any log rule-precedence 50
RFSwitch(config-std-nacl)#
15.1.2.2 Example - Denying Traffic only from Source Network
The example below denies traffic from the source network (xxx.xxx.1.0/24) and allows
all other traffic to flow through the interface:
RFSwitch(config-std-nacl)#deny xxx.xxx.1.0/24 rule-
precedence 60
RFSwitch(config-std-nacl)#permit any
NOTE: The log option is functional only for router ACL’s. The log option
results in an informational logging message for the packet matching the
entry sent to the console.