Use this procedure to apply ACLs on Cisco NCS 1010 so that configured packet-filtering rules control traffic on the selected interface.
Configure apply ACLs so that Cisco NCS 1010 uses the required settings for the selected system setup, management, or routing workflow.
Use this task when you need to apply ACLs on Cisco NCS 1010.
Before you begin
Follow these steps to apply ACLs:
Procedure
| 1. | Run the Apply ACLs command to complete this task. After you create an ACL, you must reference the ACL to make it work. ACL can be applied on either outbound or inbound interfaces. This section describes guidelines on how to accomplish this task for both terminal lines and network interfaces. |
|
| 2. | Run the Apply ACLs command to complete this task. For inbound ACLs, after receiving a packet, Cisco IOS XR software checks the source address of the packet against the ACL. If the ACL permits the address, the software continues to process the packet. If the ACL rejects the address, the software discards the packet and returns an ICMP host unreachable message. The ICMP message is configurable. |
|
| 3. | Run the Apply ACLs command to complete this task. For outbound ACLs, after receiving and routing a packet to a controlled interface, the software checks the source address of the packet against the ACL. If the ACL permits the address, the software sends the packet. If the ACL rejects the address, the software discards the packet and returns an ICMP host unreachable message. |
|
| 4. | Run the Apply ACLs command to complete this task. When you apply an ACL that has not yet been defined to an interface, the software acts as if the ACL has not been applied to the interface and accepts all packets. Note this behavior if you use undefined ACLs as a means of security in your network. |
The system completes the apply ACLs task.