Page 1 of 1

ACL port

Posted: 14 Jun 2022 11:19
by gsmarques
Hello,
I'm having trouble making an ACL (I think it's simple) but it's not working...
I'm mirroring some interfaces to a port (ex: 1/1/1), and I want to filter the traffic that arrives at that interface that comes from the mirror (by ip and port ex 80).

ACL
policy port group dest_port 1/1/1
policy network group IP_Block 10.10.132.5 10.10.132.10
policy condition C1 source network group IP_Block source tcp port 80 destination port 1/1/1
policy action no_access disposition drop
policy rule R1 condition C1 action no_access


it's giving the error
ERROR: Dest Port not supported For Default List Rule

How to make this ACL (OS 6860 V8.255)?

Re: ACL port

Posted: 16 Jun 2022 07:03
by silvio
wrong topic - the question is not general....

The error message says that dest port is not possible (for this hardware). So you you have to find another solution - f.e. dest ip/network etc.
BR Silvio

Re: ACL port

Posted: 17 Jun 2022 05:25
by gsmarques
Thanks @Silvio
If you want I can move the post to another topic (OS 6860). To change it will probably have to be deleted (admin) and I can create in the new topic.

++++++++++++++++++++++
I've tried other options without success... and I believe that the error has nothing to do with the hardware, because if you create the rule without being in the "default-list", the command is already accepted.

Re: ACL port

Posted: 18 Jun 2022 14:03
by silvio
do it the next time better :-)