C613-50631-01 Rev A Command Reference for IE340 Series 1990
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
(NAMED HARDWARE ACL ENTRY FOR MAC ADDRESSES)
Usage notes To use this command, first run the command access-list hardware (named
hardware ACL) and enter the desired access-list name. This changes the prompt to:
awplus(config-ip-hw-acl)#
Then use this command (and the other “named hardware ACL: entry” commands)
to add filter entries. You can add multiple filter entries to an ACL. You can insert a
new filter entry into the middle of an existing list by specifying the appropriate
sequence number. If you do not specify a sequence number, the switch puts the
entry at the end of the ACL and assigns it the next available multiple of 4 as its
sequence number.
Then use the access-group or the match access-group command to apply this ACL
to a port, VLAN or QoS class-map. Note that the ACL will only apply to incoming
data packets.
Examples To add a filter entry to the access-list named “my-list” that will permit packets with
a source MAC address of 0000.00ab.1234 and any destination MAC address, use
the commands:
awplus# configure terminal
awplus(config)# access-list hardware my-list
awplus(config-ip-hw-acl)# permit mac 0000.00ab.1234
0000.0000.0000 any
To remove a filter entry that permit packets with a source MAC address of
0000.00ab.1234 and any destination MAC address, use the commands:
awplus# configure terminal
awplus(config)# access-list hardware my-list
awplus(config-ip-hw-acl)# no permit mac 0000.00ab.1234
0000.0000.0000 any
Related
commands
access-group
access-list hardware (named hardware ACL)
match access-group
show running-config
show access-list (IPv4 Hardware ACLs)
Command
changes
Version 5.5.3-0.1: deny-and-not-cpu action parameter added on x230, x550, x930,
x950, SBx908 GEN2 Series switches
Version 5.4.7-2.1: send-to-vlan-port action parameter added on GS900MX,
GS980MX, XS900MX, SBx8100, SBx908 GEN2, x950 Series switches
Version 5.4.6-2.1: send-to-vlan-port action parameter added on IX5, x230, x310,
x510, x930 Series switches