C613-50631-01 Rev A Command Reference for IE340 Series 1950
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
ACCESS
-LIST (NUMBERED HARDWARE ACL FOR IP PACKETS)
Mode Global Configuration
Default On an interface controlled by a hardware ACL, any traffic that does not explicitly
match a filter is permitted.
Usage notes This command creates an ACL for use with hardware classification. Once you have
configured the ACL, use the access-group or the match access-group command to
apply this ACL to a port, VLAN or QoS class-map.
ACLs numbered in the range 3000-3699 match on packets that have the specified
source and destination IP addresses.
Examples To create an access-list that will permit IP packets with a source address of
192.168.1.1 and any destination address, enter the commands:
awplus# configure terminal
awplus(config)# access-list 3000 permit ip 192.168.1.1/32 any
To destroy the access-list with an access-list identity of 3000 enter the following
commands:
awplus# configure terminal
awplus(config)# no access-list 3000
Related
commands
access-group
match access-group
show running-config
show access-list (IPv4 Hardware ACLs)
Command
changes
Version 5.5.3-0.1: deny-and-not-cpu action parameter added on x230, x550, x930,
x950, SBx908 GEN2 Series switches
Version 5.5.3-0.1: log parameter added on x220, x320, x530, x550, x950, SBx908
GEN2 Series switches
Version 5.4.7-2.1: send-to-vlan-port action parameter added on GS900MX,
GS980MX, XS900MX, SBx8100, SBx908 GEN2, x950 Series switches
Version 5.4.6-2.1: send-to-vlan-port action parameter added on IX5, x230, x310,
x510, x930 Series switches
To Next Page
Loading...
Need help?
General
