Creating an ACL interface

The ACL interface is created on top of the service interface, it filters traffic transmitted between transport services. Before creating an ACL interface, you must complete the following steps:

• Create a service interface.
• Create a traffic filter.

To create an ACL interface:

1. In the menu, go to the Infrastructure section.

   The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

2. Click Management next to the SD-WAN Controller and in the drop-down list, select Configuration menu.

   This opens the SD-WAN Controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of Controller nodes.

3. Go to the Service interfaces section.

   A table of service and ACL interfaces is displayed.

4. In the upper part of the page, in the Switch and Port drop-down lists, select a CPE device and an OpenFlow interface.
5. Click + Create service interface.
6. This opens a window; in that window, in the Type drop-down list, select ACL.
7. In the Service interface drop-down list, select the service interface on top of which you want to create the ACL interface.
8. In the Traffic fliter drop-down list, select the previously created traffic filter for the ACL interface. You can use the same traffic filter for multiple ACL interfaces.
9. In the Sequence drop-down list, select the sequential number of the ACL interface. Traffic is directed first to the ACL interface with the lowest number. If the filter used on an ACL interface drops traffic, it is forwarded to the second ACL interface, and so on.

   Range of values: 1 to 4. You cannot create two ACL interfaces with the same match order value on top of one service interface.

10. If necessary, enter a brief description of the ACL interface in the Description field.
11. Click Create.

The ACL interface is created and displayed in the table.