ACL default rule deny and RIP

[EtherNation_Use]

Create Date: May 18 2012 3:05AM

I want to set up an Extreme X450a with the last ACL match all policy rule deny. But the control packets (RIP, VRRP, STP, ...) should still work. Which action and action modifiers should be used?

(from Hans-Werner_Paulsen)

[EtherNation_Use]

Create Date: May 18 2012 6:47AM

entry control {
if match any {
source-address 224.0.0.0/8;
}
then {
permit;
}
}

entry denyAll {
if match any {
}
then {
deny;
}
}

(from john_padilla)