srl-acl-lab

Get to know ACLs on SR Linux

---

Run this lab in GitHub Codespaces for free.
Learn more about Containerlab for Codespaces.
Machine type: 2 vCPU · 8 GB RAM

---

After lab is started the following ping should succeed, as there is no default ACL in place.

sudo docker exec -i -t clab-acl-client ping -w 2 -c 2 192.168.20.100

Then configure the ACL on ethernet-1/1.0 subinterface of SR Linux to drop ICMP packets destined towards the server:

cat icmp_drop.cfg | docker exec -i clab-acl-srl sr_cli -e -c

Repeat the ping, it should not succeed, as the ICMP drop ACL is in place. You can check the logs on SR Linux to ensure that the packets are being dropped:

sudo docker exec clab-acl-srl sr_cli show system logging file acl_log