|
|
|
Use the ip access-list command to filter the data flow. You can define different lists with different criteria. Lists referenced from within an active-measurement group configuration block will control which endpoints from the flow end up as active-measurement probe targets.
The following list, named filter-traffic, lets web traffic through but prevents telnet traffic from being used:
Avaya_ANS(config)# ip access-list filter-traffic Avaya_ANS(config-acl)# remark “Let web traffic through” Avaya_ANS(config-acl)# permit tcp any any port 80 Avaya_ANS(config-acl)# permit tcp any port 80 any Avaya_ANS(config-acl)# remark “Drop telnet traffic” Avaya_ANS(config-acl)# deny tcp any port 23 any Avaya_ANS(config-acl)# deny tcp any any port 23 Avaya_ANS(config-acl)# end
If you reference multiple lists within a single active-measurement group, the lists will be applied in the order in which they are specified in the active-measurement group configuration block.
NOTE: If you modify an access list that has already been referenced as an EFC filter from within an active measurement group, you must update the list in the CNA efcserver process, with the resync efc filter command.
|
|
|