Previous page Next page

Examples: Standard ACL Rules

Table�194:�Examples: Standard ACL Rules �
To...
Enter...
  • Use the DSCP in the packet to classify all traffic that has a source IP address in the 10.10.60 subnet.
  • Mask the three least significant bits of the DSCP.
access-list MyAccessList1 4 permit use-diffserv mask 10.10.60.0 0.0.0.255
Assign a priority of 7 to all traffic that has a source IP address in the 10.10.70 subnet.
access-list MyAccessList1 5 permit use-priority 7 10.10.70.0 0.0.0.255
  • Replace the existing DSCP with a DSCP of 5 for all traffic that has a source IP address in the 10.10.80 subnet.
  • Mask the three least significant bits of the DSCP
access-list MyAccessList1 6 permit remark-diffserv 5 mask 10.10.80.0 0.0.0.255
Use the layer 2 priority of the packet to classify all traffic that has a source address in the 11.11.11 subnet
access-list MyAccessList1 7 permit use-l2 11.11.11.0 0.0.0.255
Use the DSCP in the packet to classify all traffic that has a source IP address of 199.93.239.168
access-list MyAccessList1 8 permit use-diffserv host 199.93.239.168
  • Use the DSCP in the packet to classify all traffic that has a source IP address of 3.3.3.3
  • Mask the three least significant bits of the DSCP
access-list MyAccessList1 9 permit use-diffserv mask host 3.3.3.3
Assign a priority of 2 to all traffic that has a source IP address of 1.1.1.1
access-list MyAccessList1 10 permit use-priority 2 1.1.1.1
Block all traffic that has a source IP address of 10.1.0.55
access-list MyAccessList1 11 deny 10.1.0.55


Previous page Next page