Access Control List Support - Cisco ASR 5000 series Product Overview

Hide thumbs Also See for ASR 5000 series:

Table of Contents

▀ Features and Functionality—Base Software

Since the configuration of the subscriber can specify the RADIUS server group to use as well as IP address pools from

which to assign addresses, the system implements a mechanism to support some in-band RADIUS server

implementations (i.e. RADIUS servers which are located in the corporate network, and not in the operator's network)

where the NAS-IP address is part of the subscriber pool. In these scenarios, the PDSN supports the configuration of the

first IP address of the subscriber pool for use as the RADIUS NAS-IP address.

Administration and Reference.

Access Control List Support

Access Control Lists provide a mechanism for controlling (i.e permitting, denying, redirecting, etc.) packets in and out

of the system.

IP access lists, or Access Control Lists (ACLs) as they are commonly referred to, are used to control the flow of packets

into and out of the system. They are configured on a per-context basis and consist of ―rules‖ (ACL rules) or filters that

control the action taken on packets that match the filter criteria. Once configured, an ACL can be applied to any of the

An individual interface

All traffic facilitated by a context (known as a policy ACL)

An individual subscriber

All subscriber sessions facilitated by a specific context

There are two primary components of an ACL:

Rule: A single ACL consists of one or more ACL rules. As discussed earlier, the rule is a filter configured to

take a specific action on packets matching specific criteria. Up to 128 rules can be configured per ACL.

Each rule specifies the action to take when a packet matches the specifies criteria. This section discusses the

rule actions and criteria supported by the system.

Rule Order: A single ACL can consist of multiple rules. Each packet is compared against each of the ACL rules,

in the order in which they were entered, until a match is found. Once a match is identified, all subsequent rules

are ignored.

System Enhanced Feature Configuration Guide.

▄ Cisco ASR 5000 Series Product Overview

For more information on RADIUS AAA configuration, refer AAA Interface

For more information on Access Control List configuration, refer IP Access Control List chapter in

CDMA2000 Wireless Data Services