Allied Telesis AT-x210-9GT - Page 704

C613-50105-01 REV C Command Reference for x210 Series 704
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
(ACCESS-LIST HARDWARE IP PROTOCOL FILTER)
Examples To add an access-list filter entry to the access-list named my-list that will permit
any type of IP packet with a source address of 192.168.1.1 and any destination
address, use the commands:
awplus# configure terminal
awplus(config)# access-list hardware my-list
awplus(config-ip-hw-acl)# permit ip 192.168.1.1/32 any
To add an access-list filter entry to the access-list named my-list that will permit
any type of IP packet with a source address of 192.168.1.1and a MAC source
address of ffee.ddcc.bbaa with any IP and MAC destination address, use the
commands:
awplus# configure terminal
awplus(config)# access-list hardware my-list
awplus(config-ip-hw-acl)# permit ip 192.168.1.1/32 any mac
ffee.ddcc.bbaa any
To add an access-list filter entry to the access-list named my-list a filter that will
deny all IGMP packets (protocol 2) from the 192.168.0.0 network with
sequence number 50 in access-list, use the commands:
awplus# configure terminal
awplus(config)# access-list hardware my-list
awplus(config-ip-hw-acl)# 50 deny proto 2 192.168.0.0/16 any
Related
Commands
access-list hardware (named)
show running-config
show access-list (IPv4 Hardware ACLs)