Creating an access-control list

You can create an access control list in a CPE template or on a device. When you create an access control list in a CPE template, the access control list is automatically created on all devices that are using the template.

To create an access control list:

1. Create an access control list in one of the following ways:
   • If you want to create an access control list in a CPE template, go to the SD-WAN → CPE templates menu section, click the template and in the displayed settings area, select the Routing filters → Access control lists tab.
   • If you want to create an access control list on a CPE device, go to the SD-WAN → CPE menu section, click the device, and in the displayed settings area, select the Routing filters → Access control lists tab and select the Override check box.

   A table of access control lists is displayed.

2. Click + Access control list.
3. This opens a window; in that window, in the Name field, enter the name of the access control list. Maximum length: 50 characters. Do not use spaces in this field.
4. Create a rule in the access control list:
   1. Click + Rule.
   2. In the Sequence field, enter the sequential number of the rule. The rule with the lowest sequence number is the first to be applied to the IPv4 prefix by the access control list. Range of values: 1 to 4,294,967,295.
   3. In the Network drop-down list, select the type of the rule:
      • Any network for a rule that allows or denies all IPv4 prefixes.
      • IP/mask for a rule that allows or denies the specified IPv4 prefix. Default value. If you select this value, enter the IPv4 prefix in the field that is displayed.
   4. In the Action drop-down list, select the action that the rule performs on the IPv4 prefix:
      • Permit — allow the IPv4 prefix. Default value.
      • Deny — deny the IPv4 prefix.

   The rule is created. You can add multiple rules; to delete a rule, click the delete icon next to it.

5. Click Create.

   The access control list is created and displayed in the table.

6. In the upper part of the settings area, click Save to save the settings of the CPE template or device.