Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Access Controls List (ACL) filter the type of traffic that is allowed or denied access to the network or portion of the network. ACLs act as packet filters based on the criteria defined in the access list. ACLs defined on the Sonus SBC 1000/2000 the 

Spacevars
0longproduct
do not take effect until they are applied to a port.

...

After an ACL is created, it is bound (or applied) to the following interface/ports:

On the Sonus SBC 2000:

  • Ethernet ports for inbound and forwarded traffic.
  • Logical interfaces for inbound/outbound/forwarded traffic.
  • ASM ACLs are applied to inbound and forwarded traffic only, and they are bound on the ASM interface.

On the Sonus SBC 1000:

  • ACLs are bound to logical interfaces only.
Info
titleImportant Things to Remember When Creating an ACL
  • Because the Sonus SBC 1000/2000 the 
    Spacevars
    0longproduct
    stops testing conditions after the first match, the order of the conditions is critical. The same permit or deny statements specified in a different order may result in a packet being passed under one circumstance and denied in another.
  • Input-ACL process packets arriving at the Sonus SBC 1000/2000 the 
    Spacevars
    0longproduct
    before routing to an outbound interface. An inbound access list is efficient because it saves the overhead of routing look-ups if the packet is discarded because it is denied by the filtering tests.
  • Output-ACLs process packets before they leave the Sonus SBC 1000/2000
    Spacevars
    0longproduct
    .
  • Forward-ACLs process packets that are forwarded from one Sonus SBC 1000/2000 one 
    Spacevars
    0longproduct
    port to another.
Info
titleSBC Support when ACL is applied
  • Pinholing and RTP-Pinholing is not supported in Sonus SBC 1000/2000
    Spacevars
    0longproduct
    .
  • SBC 2000 support is as follows: 
    •  ACL may be applied to an Ethernet port and it takes effect for all the VLANs on that port.
    • ACL may be applied to a Logical Interface and it is equivalent to applying ACL to a VLAN (note that a VLAN may have many Ethernet ports as members). 
  • SBC 1000 support is as follows:
    • ACLs cannot be applied to Ethernet ports. 

    • ACL may be applied to a Logical Interface and it is equivalent to applying ACL to a VLAN (note that a VLAN may have many Ethernet ports as members).

...