topic Re: Matrix N7 Platinum - Access Lists in ExtremeSwitching (EOS)

Matrix N7 Platinum - Access Lists

bmartinsgfi — Tue, 14 Jan 2020 01:59:32 GMT

Hello guys,

Can someone tell me if 7G4202-72 devices allow me to deploy ACL’s?

When entering the “router mode” I see that the access-list command exists and I can create some rules, however they’re not working as expected.

As a small test, I’ve created the following rules:

access-list 100 deny icmp host 192.168.20.109 host 192.168.1.11 log
access-list 100 deny tcp host 192.168.20.109 host 192.168.1.11 eq 443 log

My client PC’s gateway is the IP of this switch’s corresponding VLAN, so why is this not working?

Thanks!

Re: Matrix N7 Platinum - Access Lists

bmartinsgfi — Fri, 24 Jan 2020 18:50:31 GMT

Hello guys,

Does anyone have an idea about this?

Thanks!

Re: Matrix N7 Platinum - Access Lists

Matthew_Hum — Sat, 21 Mar 2020 21:39:11 GMT

I believe with the 7G blades you need an advanced routing license to use extended ACLs. Did you apply the access list to an interface? you can also use L2 policy for some of the same functionality.

Re: Matrix N7 Platinum - Access Lists

bmartinsgfi — Mon, 23 Mar 2020 15:44:39 GMT

Hello Matthew,

Thanks for your reply!

I’ve ended up contacting support and was informed that, since I’m not using the latest firmware version, ACL functionality shows up but is unusable.

Kind regards,

Bruno