EXOSVM access-list help

jasiowski — Thu, 26 Nov 2020 01:27:00 GMT

Hello, I have lab in GNS3 with 2 pc, exosvm switch and ubuntu server with www on apache and SSH. How can I connect PC1 only to www site and PC2 only to SSH. How can I use ACL to do it? Any advice?
I’m glad for any help.

Re: EXOSVM access-list help

Miguel-Angel_RO — Sat, 28 Nov 2020 17:01:19 GMT

Jasioswski,

Here from my cheat sheet:

#STATIC = from a policy '1-Check if there are enough ACL resources available '2-Create a STATIC ACL policy file #edit policy <policy-name>.pol 'edit = vi # entry <rule-name> { # if {<condition>;} # then{<actions>;} # } edit policy denyTelnet.pol entry noTelnet { if { destination-address 10.1.10.1/32; source-address 10.1.10.101/32; protocol tcp; destination-port 23; } then { deny; } } '3-Save or copy the policy file to the flash as .pol '4-Check the policy for syntax errors check policy <policy-name> '5-Apply the policy to port(s), VLAN(s) or any "wildcard" #immediately applied #precedence is port, VLAN, wildcard configure access-list <policy-name>.pol ports <ports_numbers>[ingress|egress] configure access-list <policy-name>.pol vlan <vlan_name|vlan_ID>[ingress|egress] configure access-list <policy-name>.pol any [ingress|egress] refresh policy <policy_name> 'will refresh the deployment of the policy '6-VERIFY show policy show policy <policy-name> show access-list

Mig

topic EXOSVM access-list help in ExtremeSwitching (EXOS/Switch Engine)

EXOSVM access-list help

Re: EXOSVM access-list help