Unlike ingress ACL (Access Control List)s, for egress ACLs you must specify either a source or destination address, instead of writing a rule with no match conditions.
For example, an ingress ACL deny all rule could be:
Print
this page
Email this topic
Feedback
View PDF
Download EPUB
entry DenyAllIngress{
if {
} then {
deny;
}
}
The previous rule would not work as an egress ACL.
The following is an example of an egress ACL deny all rule:
entry DenyAllEgress{
if {
source-address 0.0.0.0/0;
} then {
deny;
}
}