topic RE: Can we put multiple source address in the Access list polciy in ExtremeSwitching (EXOS/Switch Engine)

Can we put multiple source address in the Access list polciy

Farookh_shaikh — Wed, 08 Jul 2015 16:42:00 GMT

can we make access policy with multiple source address
since i am trying to do this but it is giving error in policy check

RE: Can we put multiple source address in the Access list polciy

OscarK — Wed, 08 Jul 2015 16:59:00 GMT

Each entry can only have 1 source-address, but you could use the mask to include more addresses if these are within a range. You could also create a 2nd entry for the next source-address.

RE: Can we put multiple source address in the Access list polciy

Farookh_shaikh — Wed, 08 Jul 2015 17:05:00 GMT

Thanks Oscark, can we create 2nd entry in same policy

RE: Can we put multiple source address in the Access list polciy

StephenW — Wed, 08 Jul 2015 17:16:00 GMT

Faruk, Yes you can create a 2nd entry in same policy file.

RE: Can we put multiple source address in the Access list polciy

Senguttuvan__Ar — Wed, 08 Jul 2015 17:24:00 GMT

Hi Faruk,

I believe you are getting following errors while applying the policy to the port:

Error: Policy test123 has syntax errors
Line 4 : Attribute source-address already exists as a match statement in Acl entry test123.

Having similar match conditions on a rule is not accepted. Instead of having 2 source-address in 1 rule, you could have them on 2 different rules in a single policy file like below:

entry test {
if {
source-address 1.1.1.1/32;
} then {
permit;
}
}
entry test1 {
if {
source-address 2.2.2.2/32;
} then {
permit;
}
}

If you have further questions, please let me know.

Re: RE: Can we put multiple source address in the Access list polciy

Keith9 — Wed, 30 Oct 2024 18:32:54 GMT

this is strange because check policy shows its valid but once you apply it to a port that's when you get the error.

The SSH policy (to deny access to SSH into the switch but allow only a few subnets to log in) works differently for some reason.