ACL port

Post Reply
gsmarques

ACL port

Post by gsmarques »

Hello,
I'm having trouble making an ACL (I think it's simple) but it's not working...
I'm mirroring some interfaces to a port (ex: 1/1/1), and I want to filter the traffic that arrives at that interface that comes from the mirror (by ip and port ex 80).

ACL
policy port group dest_port 1/1/1
policy network group IP_Block 10.10.132.5 10.10.132.10
policy condition C1 source network group IP_Block source tcp port 80 destination port 1/1/1
policy action no_access disposition drop
policy rule R1 condition C1 action no_access


it's giving the error
ERROR: Dest Port not supported For Default List Rule

How to make this ACL (OS 6860 V8.255)?
silvio
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 2087
Joined: 01 Jul 2008 10:51
Location: Germany

Re: ACL port

Post by silvio »

wrong topic - the question is not general....

The error message says that dest port is not possible (for this hardware). So you you have to find another solution - f.e. dest ip/network etc.
BR Silvio
gsmarques

Re: ACL port

Post by gsmarques »

Thanks @Silvio
If you want I can move the post to another topic (OS 6860). To change it will probably have to be deleted (admin) and I can create in the new topic.

++++++++++++++++++++++
I've tried other options without success... and I believe that the error has nothing to do with the hardware, because if you create the rule without being in the "default-list", the command is already accepted.
silvio
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 2087
Joined: 01 Jul 2008 10:51
Location: Germany

Re: ACL port

Post by silvio »

do it the next time better :-)
Post Reply

Return to “GENERAL”