C613-50631-01 Rev A Command Reference for IE340 Series 1958
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
ACCESS
-LIST (NUMBERED HARDWARE ACL FOR MAC ADDRESSES)
To create an access-list that will permit packets if their source MAC address starts
with 0000.00ab, use the commands:
awplus# configure terminal
awplus(config)# access-list 4001 permit 0000.00ab.1234
0000.0000.FFFF any
To create an access-list that will send a copy of packets to the mirror port if their
source MAC address starts with 0000.00ab, use the commands:
awplus# configure terminal
awplus(config)# access-list 4001 copy-to-mirror 0000.00ab.1234
0000.0000.FFFF any
You also need to configure the mirror port with the mirror interface command.
To destroy the access-list with an access-list identity of 4000 enter the commands:
awplus# configure terminal
awplus(config)# no access-list 4000
Related
commands
access-group
match access-group
show running-config
show access-list (IPv4 Hardware ACLs)
Command
changes
Version 5.5.3-0.1: deny-and-not-cpu action parameter added on x230, x550, x930,
x950, SBx908 GEN2 Series switches
Version 5.4.7-2.1: send-to-vlan-port action parameter added on GS900MX,
GS980MX, XS900MX, SBx8100, SBx908 GEN2, x950 Series switches
Version 5.4.6-2.1: send-to-vlan-port action parameter added on IX5, x230, x310,
x510, x930 Series switches