Allied Telesis AlliedWare Plus User Manual

C613-50100-01 REV C Command Reference for x930 Series 1885
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
(ACCESS-LIST HARDWARE MAC FILTER)
Mode IPv4 Hardware ACL Configuration
Default Any traffic on an interface controlled by a hardware ACL that does not explicitly
match a filter is permitted.
Usage First create a named hardware access-list that applies the appropriate permit/deny
requirements. Then use the access-group command to apply this access-list to a
specific port or range. Note that this command will apply the access-list only to
incoming data packets.
An ACL can be configured with multiple ACL filters using sequence numbers. If the
sequence number is omitted, the next available multiple of 10 will be used as the
sequence number for the new filter. A new ACL filter can be inserted into the
middle of an existing list by specifying the appropriate sequence number
NOTE: The access control list being configured is selected by running the access-list
hardware (named) command. with the required access control list number, or name,
but with no further parameters selected.
Hardware ACLs will permit access unless explicitly denied by an ACL action.
Examples To add an access-list filter entry to the access-list named my-list that will permit
packets with a source MAC address of 0000.00ab.1234 and any destination
MAC address, use the commands:
awplus# configure terminal
awplus(config)# access-list hardware my-list
awplus(config-ip-hw-acl)# permit mac 0000.00ab.1234
0000.0000.0000 any
<source-mac-mask> The mask that will be applied to the source MAC
addresses.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that
represents a 4 bit binary number. For a mask, each
value will be either 0 or F.
Where Hex FF = Ignore, and Hex 00 = Match.
any Any source MAC host.
<destination-mac-
address>
The destination MAC address of the packets.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that
represents a 4 bit binary number.
<destination-mac-mask> The mask that will be applied to the destination
MAC addresses.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that
represents a 4 bit binary number. For a mask, each
value will be either 0 or F.
Where Hex FF = Ignore, and Hex 00 = Match.
any Any destination MAC host.
Parameter Description

Allied Telesis AlliedWare Plus Specifications

General

Brand	Allied Telesis
Model	AlliedWare Plus
Category	Switch
Language	English