Associating a DCC dial ACL with the dialup interface
You can configure a dial ACL to filter traffic traversing a dialup interface. Packets include the following categories, depending on whether they comply with the permit or deny statements in the dial ACL:
Packets matching a permit statement or that do not match any deny statements. When receiving such a packet, DCC either sends it out if a link is present and resets the idle-timeout timer or originates a new call to set up a link if no link is present.
Packets not matching any permit statements or that match a deny statement. When receiving such a packet, DCC either sends it out without resetting the idle-timeout timer if a link is present, or drops it without originating calls for link setup if no link is present.
For DCC to send packets correctly, configure a dial ACL and associate it with the concerned dialup interface (physical or dialer interface) by using the dialer-group command. You can either configure a dial ACL directly using the dialer-rule command or reference an existing ACL.
To associate a dial ACL with the dialup interface:
Step | Command |
|---|---|
1. Enter system view. | system-view |
2. Configure a dial ACL for a dialer access group, specifying the conditions triggering DCC calls. | dialer-rule group-number { protocol-name { deny | permit } | acl { acl-number | name acl-name } } |
3. Enter dialup interface (physical or dialer interface) view. | interface interface-type interface-number |
4. Associate the dialup interface with the dial ACL by associating the interface with the corresponding dialer access group. | dialer-group group-number |
Make sure that the group-number arguments in the dialer-rule and dialer-group commands take the same value.