C613-50631-01 Rev A Command Reference for IE340 Series 1949
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
ACCESS
-LIST (NUMBERED HARDWARE ACL FOR IP PACKETS)
Table 38-2: IP and ICMP parameters in access-list (hardware IP numbered)
Parameter Description
<3000-3699> An ID number for this hardware IP access-list.
<action> The action that the switch will take on matching packets. See the
table above for valid values.
ip Match against IP packets
<source-ip> The source addresses to match against. You can specify a single
host, a subnet, or all source addresses. The following are the valid
formats for specifying the source:
any Match any source IP address.
host <ip-addr> Match a single source host with the
IP address given by <ip-addr> in
dotted decimal notation.
<ip-addr>/<prefix> Match any source IP address within
the specified subnet. Specify the
subnet by entering the IPv4 address,
then a forward slash, then the prefix
length.
<ip-addr>
<reverse-mask>
Match any source IP address within
the specified subnet. Specify the
subnet by entering a reverse mask in
dotted decimal format. For example,
entering “192.168.1.1 0.0.0.255” is
the same as entering 192.168.1.1/24.
<dest-ip> The destination addresses to match against. You can specify a
single host, a subnet, or all destination addresses. The following
are the valid formats for specifying the destination:
any Match any destination IP address.
host <ip-addr> Match a single destination host with
the IP address given by <ip-addr> in
dotted decimal notation.
<ip-addr>/<prefix> Match any destination IP address
within the specified subnet. Specify
the subnet by entering the IPv4
address, then a forward slash, then
the prefix length.
<ip-addr>
<reverse-mask>
Match any destination IP address
within the specified subnet. Specify
the subnet by entering a reverse
mask in dotted decimal format. For
example, entering “192.168.1.1
0.0.0.255” is the same as entering
192.168.1.1/24.
vlan <1-4094> The VLAN to match against. The ACL will match against the
specified ID in the packet’s VLAN tag.