topic Re: Dynamic ACL - multiple source-address in single statement? in ExtremeSwitching (EXOS/Switch Engine)

Dynamic ACL - multiple source-address in single statement?

djs86 — Tue, 17 Oct 2023 10:25:10 GMT

I can create a simple ACL like below:

create access-list Mgmt-Access "source-address 192.168.40.0/24;" "permit;"

configure ssh2 access-profile add Mgmt-Access first

But how do I add another address range to this acl? Do I need to do:

create access-list Mgmt-Access2 "source-address 192.168.50.0/24;" "permit;"

configure ssh2 access-profile add Mgmt-Access2 after Mgmt-Access

A bit messy and was hoping to combine all my ranges in a single ACL. Is this possible?

This below makes it sound like you can:

create access-list <EntryName> "<MatchCondition>;<MatchCondition>;" "<Action>; <ActionModifier>;"

But when I use source-address twice it doesnt like it. Is there some other formatting?

Thanks

Re: Dynamic ACL - multiple source-address in single statement?

Gabriel_G — Tue, 17 Oct 2023 15:33:59 GMT

The most common way of creating an SSH access-profile is here using static ACLs:
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000090702

Otherwise, using dynamic ACLs is fine with the commands you listed. However, you cannot combine multiple ranges into a single dynamic ACL entry (only certain static ACLs), so you have to use multiple entries as you've identified.

Re: Dynamic ACL - multiple source-address in single statement?

djs86 — Tue, 17 Oct 2023 16:05:15 GMT

Thanks, is there a way of creating static ACL's using ExtremecloudIQ? I can't seem to find it.

That's why I was using dynamic ACL's as I could then push out via a template and the supplemental CLi