ip access-group access_group_name in
ip access-group access_group_name out
exit
aaa group default
exit
gtpp group default
exit
content-filtering server-group cfsg_name
response-timeout response_timeout
connection retry-timeout retry_timeout
end
Applying an ACL to the Subscriber Named default
This section provides information and instructions for applying an ACL to the subscriber named default.
This section provides the minimum instruction set for applying the ACL list to all traffic within a context.
For more information on commands that configure additional parameters and options, refer to Subscriber
Configuration Mode Commands in the Command Line Interface Reference.
Important
To configure the system to provide access control list facility to subscribers:
Step 1
Apply the configured access control list by following the example configuration in Applying an ACL to the Subscriber
Named default, on page 259
Step 2
Verify that ACL is applied properly on interface by following the steps in Verifying the ACL Configuration to the
Subscriber Named default, on page 260
Step 3
Save your configuration to flash memory, an external memory device, and/or a network location using the Exec mode
save configuration command. For additional information refer to the Verifying and Saving Your Configuration chapter.
Applying an ACL to the Subscriber Named default
To apply the ACL to the subscriber named default, use the following configuration:
configure
context acl_ctxt_name [ -noconfirm ]
subscriber name subs_name
{ ip | ipv6 } access-group acl_list_name [ in | out ]
end
Notes:
•
The context name is the name of the ACL context containing the interface to which the ACL is to be
applied.
ASR 5500 System Administration Guide, StarOS Release 21.4
259
Access Control Lists
Applying an ACL to the Subscriber Named default