<div dir="ltr">Thanks! I will check it out and test!</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Apr 22, 2014 at 6:10 AM, "Kuba" Dawid Chrzan <span dir="ltr"><<a href="mailto:dawid.chrzan@pszczyna.net.pl" target="_blank">dawid.chrzan@pszczyna.net.pl</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi<br>
<br>
for blocking tcp/udp port ie. 21 - try<br>
<br>
create access-mask TEST precedence 101 dest-L4port<br>
create access-list TESTACL access-mask test dest-L4port 21 deny<br>
<br>
It is a little bit tricky on ExtremeWare with ACLs.<br>
You gave to setup propper acces mask list with propper precedences.<br>
Then setup acces list rules.<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Send extreme-nsp mailing list submissions to<br>
<a href="mailto:extreme-nsp@puck.nether.net" target="_blank">extreme-nsp@puck.nether.net</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://puck.nether.net/mailman/listinfo/extreme-nsp" target="_blank">https://puck.nether.net/<u></u>mailman/listinfo/extreme-nsp</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:extreme-nsp-request@puck.nether.net" target="_blank">extreme-nsp-request@puck.<u></u>nether.net</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:extreme-nsp-owner@puck.nether.net" target="_blank">extreme-nsp-owner@puck.nether.<u></u>net</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of extreme-nsp digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Good advice on Access Control Lists on ExtremeWare (root net)<br>
<br>
<br>
<br>
------------------------------<u></u>------------------------------<u></u>----------<br>
<br>
Message: 1<br>
Date: Mon, 21 Apr 2014 09:45:41 -0500<br>
From: root net <<a href="mailto:rootnet08@gmail.com" target="_blank">rootnet08@gmail.com</a>><br>
To: Extreme NSP <<a href="mailto:extreme-nsp@puck.nether.net" target="_blank">extreme-nsp@puck.nether.net</a>><br>
Subject: [e-nsp] Good advice on Access Control Lists on ExtremeWare<br>
Message-ID:<br>
<<a href="mailto:CACdLqhW8A--Q93A5vVSEo2dT4PxB%2BLhcRhmpkJrYUnyNEkN40g@mail.gmail.com" target="_blank">CACdLqhW8A--<u></u>Q93A5vVSEo2dT4PxB+<u></u>LhcRhmpkJrYUnyNEkN40g@mail.<u></u>gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hello,<br>
<br>
Anyone have good advice on using ACLs on ExtremeWare, namely the BD 6808<br>
MSM64i. I know it's old but have one left and never had ACLs on it just<br>
used Cisco's around it. Now would like to put some security on it directly<br>
as we plan to upgrade end of this year or next to ExtremeXOS supported gear.<br>
<br>
Would like to accomplish:<br>
<br>
1. BCP38<br>
2. Block couple ports switch wide<br>
3. Limit telnet/ssh to switch on all IPs assigned. (With Cisco this is easy)<br>
<br>
For example with #3 if you have layer 3 VLANs now every gateway IP has<br>
access to switch via telnet/ssh. With Cisco you could apply ACL to VTY and<br>
it's done.<br>
<br>
For example with #2 block tcp/udp 135,137,138.139.445.<br>
<br>
For example with #1 prevent spoofing, and etc on ingress and egress.<br>
<br>
Also, it would be helpful if someone couple provide an example or provide<br>
links to good resources.<br>
I've read the reference command guide but not sure I understand correctly.<br>
<br>
Thanks,<br>
<br>
Any advice is appreciate for sure!<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL:<br>
<br>
<<a href="https://puck.nether.net/pipermail/extreme-nsp/attachments/20140421/12212996/attachment-0001.html" target="_blank">https://puck.nether.net/<u></u>pipermail/extreme-nsp/<u></u>attachments/20140421/12212996/<u></u>attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
______________________________<u></u>_________________<br>
extreme-nsp mailing list<br>
<a href="mailto:extreme-nsp@puck.nether.net" target="_blank">extreme-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/extreme-nsp" target="_blank">https://puck.nether.net/<u></u>mailman/listinfo/extreme-nsp</a><br>
<br>
------------------------------<br>
<br>
End of extreme-nsp Digest, Vol 113, Issue 2<br>
******************************<u></u>*************<span class="HOEnZb"><font color="#888888"><br>
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
-- <br>
Pozdrawiam<br>
"Kuba" Dawid Chrzan<br>
<a href="http://pszczyna.net.pl" target="_blank">pszczyna.net.pl</a><br>
<br>
</font></span></blockquote></div><br></div>