<html><head></head><body><div dir="auto">jaja  si   ahora  han mejorado  mucho  con la línea  ccr   de 36  cores  y micros  tilera, pero  aún  no  hay  nada  a nivel  de core . Pero  para  algo de mediano   porte  hace  su trabajo .  Es como  comparar un acme packet  4600  con un asterisk  para telefonía.<br></div>
<div dir="auto">Buen  finde  para  todos <br></div>
<div dir="auto">Sebastiàn Bergagna<br></div>
<div dir="auto"><a href="http://Dainus.net">Dainus.net</a></div>
<div class="gmail_quote" >En 14 de diciembre de 2018, en 17:34, Alejandro Mucic &lt;<a href="mailto:ipnero@gmail.com" target="_blank">ipnero@gmail.com</a>&gt; escribió:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr">
 me encanta mikrotik pero le falta unos cuantos eones para alcanzar a cisco.
</div>
<br>
<div class="gmail_quote">
 <div dir="ltr">
  On Fri, Dec 14, 2018 at 10:48 AM Jose Luis Gaspoz &lt;
  <a href="mailto:gaspozj@is.com.ar">gaspozj@is.com.ar</a>&gt; wrote:
  <br>
 </div>
 <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> 
  <div dir="ltr"> 
   <div dir="ltr"> 
    <div style="font-size:12pt;font-family:Calibri;color:rgb(0,0,0)"> 
     <div>
      &nbsp;
     </div> 
     <div>
      Comparto con Ivan ..... es como comparar un auto de rally con uno de calle, si no tenes que correr un rally son mas o menos iguales, es mas, en la calle es mas cómodo el estándar .... pero si tenes que correr un rally o acelerar un poco mas, no creo que quieras estar en el estándar 
      <img class="gmail-m_-5847410496822788165wlEmoticon gmail-m_-5847410496822788165wlEmoticon-smile" style="border-style: none;" alt="Sonrisa" src="cid:167ae6c116b7ecef7ac1">
     </div> 
     <div>
      &nbsp;
     </div> 
     <div>
      No es para polemizar, por ahi no se conoce mucho las últimas soluciones de las marcas de punta. La facilidad es relativa a con que estas trabajando.... precisamente, trabajar con políticas de trafico/encapsulacion/marcado/filtrado que laburan directamente contra una programable ASIC / UADP /FPGA en un Switch capa 3 antes de llegar a ser tratado en el “proceso Core” complican “las líneas de comando” pero indudablemente las ventajas son infinitas porque ahi realmente es wired-speed el proceso.
     </div> 
     <div>
      &nbsp;
     </div> 
     <div>
      Saludos
     </div> 
     <div>
      &nbsp;
     </div> 
     <div>
      &nbsp;
     </div> 
     <div style="font-size:12pt;font-family:Calibri;color:rgb(0,0,0)">
      Ing. Jose Luis Gaspoz
      <br>Internet Services S.A.
      <br>Tel: 0342-4565118
      <br>Cel: 342-5008523
     </div> 
     <div style="font-size:small;text-decoration:none;font-family:Calibri;font-weight:normal;color:rgb(0,0,0);font-style:normal;display:inline"> 
      <div style="font:10pt tahoma"> 
       <div>
        &nbsp;
       </div> 
       <div style="background:rgb(245,245,245)"> 
        <div>
         <b>From:</b> 
         <a title="info@ivanchapero.com.ar" href="mailto:info@ivanchapero.com.ar" target="_blank">Ivan Chapero</a> 
        </div> 
        <div>
         <b>Sent:</b> Thursday, December 13, 2018 5:14 PM
        </div> 
        <div>
         <b>To:</b> 
         <a title="carriers@dainus.net" href="mailto:carriers@dainus.net" target="_blank">carriers@dainus.net</a> 
        </div> 
        <div>
         <b>Cc:</b> 
         <a title="lista@arnog.com.ar" href="mailto:lista@arnog.com.ar" target="_blank">lista@arnog.com.ar</a> ; 
         <a title="gaspozj@is.com.ar" href="mailto:gaspozj@is.com.ar" target="_blank">Jose Luis Gaspoz</a> 
        </div> 
        <div>
         <b>Subject:</b> Re: [Lista ArNOG] Trafficc Policy en Switch L3 de Huawei
        </div>
       </div>
      </div> 
      <div>
       &nbsp;
      </div>
     </div> 
     <div style="font-size:small;text-decoration:none;font-family:Calibri;font-weight:normal;color:rgb(0,0,0);font-style:normal;display:inline"> 
      <div dir="ltr"> 
       <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
        Cuando Mikrotik trate y logre de hacer eso sobre un HW FPGA o ASIC y no sobre un CPU de instrucciones genéricas volvemos a charlar si va a ser así de fácil y sobre todo: si funcionara.
       </div> 
       <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
        &nbsp;
       </div> 
       <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
        De momento es comparar peras con manzanas. Cada uno la fruta que le guste :P
        <br>
       </div>
      </div> 
      <div>
       &nbsp;
      </div> 
      <div class="gmail_quote"> 
       <div dir="ltr">
        El jue., 13 dic. 2018 a las 16:56, Carriers (&lt;
        <a href="mailto:carriers@dainus.net" target="_blank">carriers@dainus.net</a>&gt;) escribió:
        <br>
       </div> 
       <blockquote class="gmail_quote" style="padding-left:1ex;margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204)"> 
        <div dir="ltr"> 
         <div>
          Por eso&nbsp; el dia que mikrotik&nbsp;&nbsp; saque&nbsp; equipos&nbsp; potentes se le va caer&nbsp; el negocio&nbsp; a más&nbsp; de uno,con&nbsp; solo poner&nbsp; un drop&nbsp; o un destination&nbsp;&nbsp; ip&nbsp;&nbsp;&nbsp; filtras rango ,puerto, protocolo&nbsp; etc .Soy conciente&nbsp; que&nbsp; cisco&nbsp; es lo mejor , pero&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; es&nbsp; cuando&nbsp; en telefonía&nbsp; pasemos&nbsp; todo&nbsp; a sip los dinosaurios&nbsp; de SS7&nbsp;&nbsp; van a tener horas&nbsp; libres .
          <br>
         </div> 
         <div>
          Sebastián Bergagna
          <br>
         </div> 
         <div>
          <a href="http://Dainus.net" target="_blank">Dainus.net</a>
          <br>
          <br>
         </div> 
         <div>
          Ignorante pero muy&nbsp; curioso 
         </div> 
         <div class="gmail_quote">
          En 13 de diciembre de 2018, en 15:25, Jose Luis Gaspoz &lt;
          <a href="mailto:gaspozj@is.com.ar" target="_blank">gaspozj@is.com.ar</a>&gt; escribió: 
          <blockquote class="gmail_quote" style="padding-left:1ex;margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204)"> 
           <div dir="ltr"> 
            <div style="font-size:12pt;font-family:Calibri;color:rgb(0,0,0)"> 
             <div>
              &nbsp;
             </div> 
             <div>
              Quisiera conocer al que ideó eso.... debe tener una mente retorcida digna de estudio 
              <img class="gmail-m_-5847410496822788165gmail-m_1835274400045291786wlEmoticon gmail-m_-5847410496822788165gmail-m_1835274400045291786wlEmoticon-smile" style="border-style: none;" alt="Sonrisa">
             </div> 
             <div>
              &nbsp;
             </div> 
             <div>
              Algo sencillo como “seleccion de trafico” ==&gt; “politica a aplicar” ==&gt;”donde se aplica y con que direccion”, lo transforma en flechas para todos lados.
             </div> 
             <div>
              &nbsp;
             </div> 
             <div style="font-size:12pt;font-family:Calibri;color:rgb(0,0,0)">
              Ing. Jose Luis Gaspoz
              <br>Internet Services S.A.
              <br>Tel: 0342-4565118
              <br>Cel: 342-5008523
             </div> 
             <div style="font-size:small;text-decoration:none;font-family:Calibri;font-weight:normal;color:rgb(0,0,0);font-style:normal;display:inline"> 
              <div style="font:10pt tahoma"> 
               <div>
                &nbsp;
               </div> 
               <div style="background:rgb(245,245,245)"> 
                <div>
                 <b>From:</b> 
                 <a title="info@ivanchapero.com.ar" href="mailto:info@ivanchapero.com.ar" target="_blank">Ivan Chapero</a> 
                </div> 
                <div>
                 <b>Sent:</b> Thursday, December 13, 2018 2:54 PM
                </div> 
                <div>
                 <b>To:</b> 
                 <a title="gaspozj@is.com.ar" href="mailto:gaspozj@is.com.ar" target="_blank">Jose Luis Gaspoz</a> 
                </div> 
                <div>
                 <b>Cc:</b> 
                 <a title="lista@arnog.com.ar" href="mailto:lista@arnog.com.ar" target="_blank">lista@arnog.com.ar</a> 
                </div> 
                <div>
                 <b>Subject:</b> Re: [Lista ArNOG] Trafficc Policy en Switch L3 de Huawei
                </div>
               </div>
              </div> 
              <div>
               &nbsp;
              </div>
             </div> 
             <div style="font-size:small;text-decoration:none;font-family:Calibri;font-weight:normal;color:rgb(0,0,0);font-style:normal;display:inline"> 
              <div dir="ltr"> 
               <div dir="ltr"> 
                <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                 Si, me llevo a romper trafico cuando migramos, por eso refuerzo que labura muy distinto. Incluso esto tampoco es asi:
                </div> 
                <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif">
                 <span style="color:rgb(0,0,255)"><i><br></i></span>
                </div> 
                <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif">
                 <span style="color:rgb(0,0,255)"><i>"</i></span>
                </div> 
                <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)"> 
                 <div>
                  <span style="color:rgb(0,0,255)"><i>El behavior es si que vas a hacer con el trafico seleccionado, en este caso tiene que ser deny (recorda que lo que vos pones deny en el selector de trafico significa que vos NO le vas a aplicar esta política, por lo que no lo deniega)&nbsp; "</i></span>
                  <br>
                 </div>
                </div> 
                <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                 &nbsp;
                </div> 
                <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                 Un behavior en deny, genera una acción de packet-filtering que niega el packet. No excluye la clase vinculada de la política tampoco.
                 <br>
                </div> 
                <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                 &nbsp;
                </div> 
                <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)"> 
                 <div>
                  <img style="margin-right: 25px;" alt="imagen.png">
                  <br>
                 </div>
                </div> 
                <div>
                 &nbsp;
                </div> 
                <div>
                 &nbsp;
                </div> 
                <div> 
                 <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                  <a href="http://support.huawei.com/enterprise/en/doc/EDOC1000178175/830e0b75/configuring-packet-filtering" target="_blank">http://support.huawei.com/enterprise/en/doc/EDOC1000178175/830e0b75/configuring-packet-filtering</a>
                  <br>
                 </div> 
                 <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                  &nbsp;
                 </div> 
                 <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                  &nbsp;
                 </div> 
                 <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                  Abrazo!
                 </div> 
                 <div class="gmail_default" style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)"></div> 
                 <div>
                  &nbsp;
                 </div>
                </div> 
                <div class="gmail_quote"> 
                 <div dir="ltr">
                  El jue., 13 dic. 2018 a las 14:49, Jose Luis Gaspoz (&lt;
                  <a href="mailto:gaspozj@is.com.ar" target="_blank">gaspozj@is.com.ar</a>&gt;) escribió:
                  <br>
                 </div> 
                 <blockquote class="gmail_quote" style="padding-left:1ex;margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204)"> 
                  <div dir="ltr"> 
                   <div dir="ltr"> 
                    <div style="font-size:12pt;font-family:Calibri;color:rgb(0,0,0)"> 
                     <div>
                      &nbsp;
                     </div> 
                     <div>
                      Ja.... desanden mi explicación entonces..... yo hice un simple comparativo lógico con las politicas de Cisco porque es “en su estructura” idéntica.
                     </div> 
                     <div>
                      &nbsp;
                     </div> 
                     <div>
                      Sorry.
                     </div> 
                     <div>
                      &nbsp;
                     </div> 
                     <div>
                      Saludos
                     </div> 
                     <div>
                      &nbsp;
                     </div> 
                     <div style="font-size:12pt;font-family:Calibri;color:rgb(0,0,0)">
                      Ing. Jose Luis Gaspoz
                      <br>Internet Services S.A.
                      <br>Tel: 0342-4565118
                      <br>Cel: 342-5008523
                     </div> 
                     <div style="font-size:small;text-decoration:none;font-family:Calibri;font-weight:normal;color:rgb(0,0,0);font-style:normal;display:inline"> 
                      <div style="font:10pt tahoma"> 
                       <div>
                        &nbsp;
                       </div> 
                       <div style="background:rgb(245,245,245)"> 
                        <div>
                         <b>From:</b> 
                         <a title="info@ivanchapero.com.ar" href="mailto:info@ivanchapero.com.ar" target="_blank">Ivan Chapero</a> 
                        </div> 
                        <div>
                         <b>Sent:</b> Thursday, December 13, 2018 2:42 PM
                        </div> 
                        <div>
                         <b>To:</b> 
                         <a title="lista@arnog.com.ar" href="mailto:lista@arnog.com.ar" target="_blank">lista@arnog.com.ar</a> ; 
                         <a title="gaspozj@is.com.ar" href="mailto:gaspozj@is.com.ar" target="_blank">Jose Luis Gaspoz</a> 
                        </div> 
                        <div>
                         <b>Subject:</b> Re: [Lista ArNOG] Trafficc Policy en Switch L3 de Huawei
                        </div>
                       </div>
                      </div> 
                      <div>
                       &nbsp;
                      </div>
                     </div> 
                     <div style="font-size:small;text-decoration:none;font-family:Calibri;font-weight:normal;color:rgb(0,0,0);font-style:normal;display:inline"> 
                      <div dir="ltr"> 
                       <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                        Jose Luis, 
                        <br>
                       </div> 
                       <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                        en el MQC de Huawei no sigue la lógica (mas lógica por cierto) que otras plataformas. El deny en la ACL aplicada a la clase te niega el packet y sale del match, no lo excluye de la política y su action indicada en el behavior. 
                        <br>
                       </div> 
                       <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                        &nbsp;
                       </div> 
                       <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                        Los invito a hacer un lab xq suena ilógico, pero es así.
                        <br>
                       </div>
                      </div> 
                      <div>
                       &nbsp;
                      </div> 
                      <div class="gmail_quote"> 
                       <div dir="ltr">
                        El jue., 13 dic. 2018 a las 9:55, Jose Luis Gaspoz (&lt;
                        <a href="mailto:gaspozj@is.com.ar" target="_blank">gaspozj@is.com.ar</a>&gt;) escribió:
                        <br>
                       </div> 
                       <blockquote class="gmail_quote" style="padding-left:1ex;margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204)"> 
                        <div dir="ltr"> 
                         <div dir="ltr"> 
                          <div style="font-size:12pt;font-family:Calibri;color:rgb(0,0,0)"> 
                           <div>
                            &nbsp;
                           </div> 
                           <div>
                            El ACL que especificas es para Identificar el trafico (es el clasificador del tráfico, o sea a que tráfico se le va a aplicar la política), no es que vas a hacer con el trafico (el deny es que no vas a considerar ese trafico para la política a aplicar, no que denegas el trafico).
                           </div> 
                           <div>
                            &nbsp;
                           </div> 
                           <div>
                            El behavior es si que vas a hacer con el trafico seleccionado, en este caso tiene que ser deny (recorda que lo que vos pones deny en el selector de trafico significa que vos NO le vas a aplicar esta política, por lo que no lo deniega)
                           </div> 
                           <div>
                            &nbsp;
                           </div> 
                           <div>
                            Y la política la aplicas la aplicas en la interfaz que queres y le das la direccion (entrante , saliente).
                           </div> 
                           <div>
                            &nbsp;
                           </div> 
                           <div>
                            Saludos
                           </div> 
                           <div>
                            &nbsp;
                           </div> 
                           <div style="font-size:12pt;font-family:Calibri;color:rgb(0,0,0)">
                            Ing. Jose Luis Gaspoz
                            <br>Internet Services S.A.
                            <br>Tel: 0342-4565118
                            <br>Cel: 342-5008523
                           </div> 
                           <div style="font-size:small;text-decoration:none;font-family:Calibri;font-weight:normal;color:rgb(0,0,0);font-style:normal;display:inline"> 
                            <div style="font:10pt tahoma"> 
                             <div>
                              &nbsp;
                             </div> 
                             <div style="background:rgb(245,245,245)"> 
                              <div>
                               <b>From:</b> 
                               <a title="info@ivanchapero.com.ar" href="mailto:info@ivanchapero.com.ar" target="_blank">Ivan Chapero</a> 
                              </div> 
                              <div>
                               <b>Sent:</b> Thursday, December 13, 2018 1:26 AM
                              </div> 
                              <div>
                               <b>To:</b> 
                               <a title="lista@arnog.com.ar" href="mailto:lista@arnog.com.ar" target="_blank">lista@arnog.com.ar</a> 
                              </div> 
                              <div>
                               <b>Subject:</b> Re: [Lista ArNOG] Trafficc Policy en Switch L3 de Huawei
                              </div>
                             </div>
                            </div> 
                            <div>
                             &nbsp;
                            </div>
                           </div> 
                           <div style="font-size:small;text-decoration:none;font-family:Calibri;font-weight:normal;color:rgb(0,0,0);font-style:normal;display:inline"> 
                            <div dir="ltr"> 
                             <div dir="ltr"> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               El deny a nivel de la ACL dropea/niega/filtra siempre sin importar si es un behavior permit o deny. 
                               <br>
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               &nbsp;
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               Para lo que querés usar, la "action" del behavior tiene que ser "permit" y la ACL esta bien planteada asi para el classifier.
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               &nbsp;
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               <i>To specify the packet filtering action for packets matching an ACL rule that defines <b>permit</b>, the action taken for the packets depends on <b><span class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-cmdname">deny</span></b> or <b><span class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-cmdname">permit</span></b> in the traffic behavior. If the ACL rule defines <b>deny</b>, the packets are discarded regardless of whether <b><span class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-cmdname">deny</span></b> or <b><span class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-cmdname">permit</span></b> is configured in the traffic behavior.</i>
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               <i><br></i>
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               <i><a href="http://support.huawei.com/enterprise/en/doc/EDOC1000088754?section=j00d" target="_blank">http://support.huawei.com/enterprise/en/doc/EDOC1000088754?section=j00d</a><br></i>
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               <i><br></i>
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               Si el equipo te lo soporta, podes evitar crear toda una estructura de un policy para un simple filtro, usando traffic-filter a nivel interfaz y linkeando a la ACL:
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               &nbsp;
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               <pre class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-screen"><b><span class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-cmdname">interface xxxx<br>traffic-<b><i>filter</i></b></span></b><b><span></span></b><i><span class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-varname"></span></i> <b><span>inbound|outbound</span></b> <b><span>acl ....</span></b></pre>
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               <i><br></i>
                              </div> 
                              <div style="font-size:small;font-family:tahoma,sans-serif;color:rgb(0,0,0)">
                               <i><br></i>
                              </div>
                             </div>
                            </div> 
                            <div>
                             &nbsp;
                            </div> 
                            <div class="gmail_quote"> 
                             <div dir="ltr">
                              El mié., 12 dic. 2018 a las 22:51, Fernando Soto (&lt;
                              <a href="mailto:frsoto@gmail.com" target="_blank">frsoto@gmail.com</a>&gt;) escribió:
                              <br>
                             </div> 
                             <blockquote class="gmail_quote" style="padding-left:1ex;margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204)"> 
                              <div lang="ES-AR"> 
                               <div class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227WordSection1"> 
                                <p class="MsoNormal"><span lang="ES" style="font-size:14pt;font-family:Calibri,sans-serif;line-height:115%">Buenas gente, estoy necesitando ayuda con esto.<u></u><u></u></span></p> 
                                <p class="MsoNormal"><span lang="ES" style="font-size:14pt;font-family:Calibri,sans-serif;line-height:115%">Estoy tratando de filtrar un puerto udp para que no llegue a mis abonados, salvo desde una red mia<u></u><u></u></span></p> 
                                <p class="MsoNormal"><span style="font-size:14pt;font-family:Calibri,sans-serif;line-height:115%">Entonces seria algo asi el acl:<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">rule 10 <span style="color:rgb(192,0,0)">permit</span> udp source 200.1.2.0 0.0.0.255 destination-port eq 1234<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">rule 15 <span style="color:rgb(192,0,0)">deny </span>udp destination-port eq 1234 source any<u></u><u></u></span></p> 
                                <p class="MsoNormal"><span lang="EN-US" style="font-size:14pt;font-family:Calibri,sans-serif;line-height:115%"><u></u><u></u></span>&nbsp;</p> 
                                <p class="MsoNormal"><span lang="EN-US" style="font-size:14pt;font-family:Calibri,sans-serif;line-height:115%"><u></u><u></u></span>&nbsp;</p> 
                                <p class="MsoNormal"><span style="font-size:14pt;font-family:Calibri,sans-serif;line-height:115%">Pero siguiendo el ejemplo del tutorial del Huawei no me queda claro como aplicarlo en un puerto<u></u><u></u></span></p> 
                                <h2><a name="m_-5847410496822788165_m_1835274400045291786_m_-9014473477585245244_m_8511822800107954774_m_-7779563770538286227__Toc526945948"><span lang="EN-US">Using a Traffic Policy to Filter Packets</span></a><span></span><span lang="EN-US" style="font-size:16pt"><u></u><u></u></span></h2> 
                                <h3><a name="m_-5847410496822788165_m_1835274400045291786_m_-9014473477585245244_m_8511822800107954774_m_-7779563770538286227__Toc526945949"><span lang="EN-US">Preventing a Specified Device from Accessing a Network</span></a><span lang="EN-US"><u></u><u></u></span></h3> 
                                <p class="MsoNormal"><span lang="EN-US">Prevent the PC at 192.168.1.10 from accessing the network.<u></u><u></u></span></p> 
                                <p class="MsoNormal"><span lang="EN-US"><u></u><u></u></span>&nbsp;</p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">&lt;HUAWEI&gt; system-view<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI] acl 2000<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI-acl-basic-2000] rule <span style="color:rgb(192,0,0)">deny</span> source 192.168.1.10 0.0.0.0<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI-acl-basic-2000] quit<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US"><u></u><u></u></span>&nbsp;</p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI] traffic classifier c1<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI-classifier-c1] if-match acl 2000<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI-classifier-c1] quit<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US"><u></u><u></u></span>&nbsp;</p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI] traffic behavior b1<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola">[HUAWEI-behavior-b1] deny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="color:rgb(192,0,0)">ACA Q PASA SI PONEMOS PERMIT? SI EL ACL YA DICE DENY. ES COMO Q EL DENY ESTA DOS VECES….</span><u></u><u></u></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI-behavior-b1] quit<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US"><u></u><u></u></span>&nbsp;</p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI] traffic policy p1<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI-trafficpolicy-p1] classifier c1 behavior b1<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI-trafficpolicy-p1] quit<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US"><u></u><u></u></span>&nbsp;</p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI] interface gigabitethernet 1/0/1<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US">[HUAWEI-GigabitEthernet1/0/1] traffic-policy p1 inbound<u></u><u></u></span></p> 
                                <p class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail-m_-7779563770538286227Consola"><span lang="EN-US"><u></u><u></u></span>&nbsp;</p> 
                                <p class="MsoNormal"><span lang="EN-US"><u></u><u></u></span>&nbsp;</p>
                               </div>
                              </div>_______________________________________________
                              <br>Lista mailing list
                              <br>
                              <a href="mailto:Lista@arnog.com.ar" target="_blank">Lista@arnog.com.ar</a>
                              <br>
                              <a href="http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista" rel="noreferrer" target="_blank">http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista</a>
                              <br>
                             </blockquote>
                            </div>
                            <br clear="all">
                            <br>-- 
                            <br> 
                            <div class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774gmail_signature" dir="ltr"> 
                             <div dir="ltr">
                              <b>Ivan Chapero<br><span style="color:rgb(102,102,102)">Área Técnica y Soporte</span></b>
                              <span style="color:rgb(102,102,102)"> </span>
                              <br style="color:rgb(102,102,102)">
                              <span style="color:rgb(102,102,102)">Fijo: 03464-470280 (interno 535)</span> | 
                              <span style="color:rgb(102,102,102)">Móvil:&nbsp; 03464-155-20282</span>&nbsp; | 
                              <span style="color:rgb(102,102,102)">Skype ID: ivanchapero</span> 
                              <div>
                               <span style="color:rgb(102,102,102)">--</span>
                               <br style="color:rgb(102,102,102)"> 
                               <div style="text-align:center">
                                <span style="color:rgb(102,102,102)">GoDATA Banda Ancha - CABLETEL S.A. | Av. 9 de Julio 1163 - 2183 - Arequito - Santa Fe - Argentina</span>
                               </div>
                               <br>
                               <br>
                               <br>
                               <br>
                               <br>
                               <br>
                               <br>
                              </div>
                             </div>
                            </div> 
                            <div id="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail-m_8511822800107954774DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2">
                             <br> 
                             <table style="border-top:1px solid rgb(211,212,222);color:rgb(0,0,0)"> 
                              <tbody> 
                               <tr> 
                                <td style="width:55px;padding-top:18px"><a href="http://www.avg.com/email-signature?utm_medium=email&amp;utm_source=link&amp;utm_campaign=sig-email&amp;utm_content=emailclient" target="_blank"><img style="height: 29px; width: 46px;" alt="" src="https://ipmcdn.avast.com/images/icons/icon-envelope-tick-green-avg-v1.png" width="46" height="29"></a></td> 
                                <td style="font-size:13px;font-family:arial,helvetica,sans-serif;width:470px;color:rgb(65,66,78);padding-top:17px;line-height:18px">Libre de virus. <a style="color:rgb(68,83,234)" href="http://www.avg.com/email-signature?utm_medium=email&amp;utm_source=link&amp;utm_campaign=sig-email&amp;utm_content=emailclient" target="_blank">www.avg.com</a> </td>
                               </tr>
                              </tbody>
                             </table>
                            </div> 
                            <hr> _______________________________________________
                            <br>Lista mailing list
                            <br>
                            <a href="mailto:Lista@arnog.com.ar" target="_blank">Lista@arnog.com.ar</a>
                            <br>
                            <a href="http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista" target="_blank">http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista</a>
                            <br>
                           </div>
                          </div>
                         </div>
                        </div>_______________________________________________
                        <br>Lista mailing list
                        <br>
                        <a href="mailto:Lista@arnog.com.ar" target="_blank">Lista@arnog.com.ar</a>
                        <br>
                        <a href="http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista" rel="noreferrer" target="_blank">http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista</a>
                        <br>
                       </blockquote>
                      </div>
                      <br clear="all">
                      <br>-- 
                      <br> 
                      <div class="gmail-m_-5847410496822788165gmail-m_1835274400045291786gmail-m_-9014473477585245244gmail_signature" dir="ltr"> 
                       <div dir="ltr">
                        <b>Ivan Chapero<br><span style="color:rgb(102,102,102)">Área Técnica y Soporte</span></b>
                        <span style="color:rgb(102,102,102)"> </span>
                        <br style="color:rgb(102,102,102)">
                        <span style="color:rgb(102,102,102)">Fijo: 03464-470280 (interno 535)</span> | 
                        <span style="color:rgb(102,102,102)">Móvil:&nbsp; 03464-155-20282</span>&nbsp; | 
                        <span style="color:rgb(102,102,102)">Skype ID: ivanchapero</span> 
                        <div>
                         <span style="color:rgb(102,102,102)">--</span>
                         <br style="color:rgb(102,102,102)"> 
                         <div style="text-align:center">
                          <span style="color:rgb(102,102,102)">GoDATA Banda Ancha - CABLETEL S.A. | Av. 9 de Julio 1163 - 2183 - Arequito - Santa Fe - Argentina</span>
                         </div>
                         <br>
                         <br>
                         <br>
                         <br>
                         <br>
                         <br>
                         <br>
                        </div>
                       </div>
                      </div>
                     </div>
                    </div>
                   </div>
                  </div>
                 </blockquote>
                </div> 
                <div>
                 &nbsp;
                </div>
               </div>
              </div>
             </div>
            </div>
           </div>
          </blockquote>
         </div>
        </div>
       </blockquote>
      </div>
      <br clear="all">
      <br>-- 
      <br> 
      <div class="gmail-m_-5847410496822788165gmail_signature" dir="ltr"> 
       <div dir="ltr">
        <b>Ivan Chapero<br><span style="color:rgb(102,102,102)">Área Técnica y Soporte</span></b>
        <span style="color:rgb(102,102,102)"> </span>
        <br style="color:rgb(102,102,102)">
        <span style="color:rgb(102,102,102)">Fijo: 03464-470280 (interno 535)</span> | 
        <span style="color:rgb(102,102,102)">Móvil:&nbsp; 03464-155-20282</span>&nbsp; | 
        <span style="color:rgb(102,102,102)">Skype ID: ivanchapero</span> 
        <div>
         <span style="color:rgb(102,102,102)">--</span>
         <br style="color:rgb(102,102,102)"> 
         <div style="text-align:center">
          <span style="color:rgb(102,102,102)">GoDATA Banda Ancha - CABLETEL S.A. | Av. 9 de Julio 1163 - 2183 - Arequito - Santa Fe - Argentina</span>
         </div>
         <br>
         <br>
         <br>
         <br>
         <br>
         <br>
         <br>
        </div>
       </div>
      </div>
     </div>
    </div>
   </div>
  </div> _______________________________________________
  <br> Lista mailing list
  <br> 
  <a href="mailto:Lista@arnog.com.ar" target="_blank">Lista@arnog.com.ar</a>
  <br> 
  <a href="http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista" rel="noreferrer" target="_blank">http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista</a>
  <br> 
 </blockquote>
</div></blockquote></div></body></html>