C613-50631-01 Rev A Command Reference for IE340 Series 1979
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
(NAMED HARDWARE ACL ENTRY FOR IP PACKETS)
Mode IPv4 Hardware ACL Configuration (accessed by running the command access-list
hardware (named hardware ACL))
Default On an interface controlled by a hardware ACL, any traffic that does not explicitly
match a filter is permitted.
<ip-addr>
<reverse-mask>
Match any destination IP address
within the specified subnet. Specify
the subnet by entering a reverse
mask in dotted decimal format. For
example, entering “192.168.1.1
0.0.0.255” is the same as entering
192.168.1.1/24.
<source-mac> The source MAC address to match against. You can specify a
single MAC address, a range (through a mask), the address
learned from DHCP snooping, or any:
any Match against any source MAC
address.
<source-mac> The source MAC address to match
against, followed by the mask.
Enter the address in the format
<HHHH.HHHH.HHHH>, where each
H is a hexadecimal number.
Enter the mask in the format
<HHHH.HHHH.HHHH>, where each
H is a hexadecimal number. For a
mask, each value is either 0 or F,
where FF = Ignore, and 00 = Match.
dhcpsnooping Match the source address learned
from the DHCP Snooping binding
database.
<dest-mac> The destination MAC address to match against. You can specify a
single MAC address, a range (through a mask), or any:
any Match against any destination MAC
address.
<dest-mac> The destination MAC address to
match against, followed by the
mask.
Enter the address in the format
<HHHH.HHHH.HHHH>, where each
H is a hexadecimal number.
Enter the mask in the format
<HHHH.HHHH.HHHH>, where each
H is a hexadecimal number. For a
mask, each value is either 0 or F,
where FF = Ignore, and 00 = Match.
vlan <1-4094> The VLAN to match against. The ACL will match against the
specified ID in the packet’s VLAN tag.
Parameter Description