Matrix N7 Platinum - Access Lists

[bmartinsgfi]

Hello guys,

Can someone tell me if 7G4202-72 devices allow me to deploy ACL’s?

When entering the “router mode” I see that the access-list command exists and I can create some rules, however they’re not working as expected.

As a small test, I’ve created the following rules:

access-list 100 deny   icmp host 192.168.20.109 host 192.168.1.11 log
access-list 100 deny   tcp  host 192.168.20.109 host 192.168.1.11 eq 443 log

My client PC’s gateway is the IP of this switch’s corresponding VLAN, so why is this not working?

Thanks!

[bmartinsgfi]

Hello Matthew,

Thanks for your reply!

I’ve ended up contacting support and was informed that, since I’m not using the latest firmware version, ACL functionality shows up but is unusable.

Kind regards,

Bruno

[Matthew_Hum]

I believe with the 7G blades you need an advanced routing license to use extended ACLs. Did you apply the access list to an interface? you can also use L2 policy for some of the same functionality.

[bmartinsgfi]

Hello guys,

Does anyone have an idea about this?

Thanks!