Feature Description
IP Access Lists commonly known as Access Control Lists (ACLs) control the flow of packets into and out of the system. The configuration is per-context basis and consists of rules (ACL rules) or filters that control the action applicable for packets that match the filter criteria. Configuration must be done on the user plane's APN configuration.
ACL in the UPF supports the following configuration:
{ deny | permit } [ log ] source_ip_address source_ip_wildcard
no { deny | permit } [ log ] source_ip_address source_ip_wildcard
ACL in UPF do not support the following configuration:
-
In ip access-list access_list_name
-
after - Apply filter after packet is received or transmitted.
-
before - Apply filter before packet is received or transmitted.
-
readdress - Packet filtering rule to change destination address/port of a packet to a specific server.
-
redirect - Packet filtering rule to redirect a packet to a specific next hop.
-
-
Context-level ACL is not supported.
-
Interface-level ACL is not supported.
NOTE: For information on ACL-related CLI commands, refer to the StarOS CLI Reference.