C613-50631-01 Rev A Command Reference for IE340 Series 2118
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
QOS COMMANDS
MATCH
ACCESS-GROUP
match access-group
Overview Use this command to apply an ACL to a class-map or VLAN.
Use the no variant of this command to remove the match.
Syntax
match access-group {<hw-IP-ACL>|<hw-MAC-ACL>|<hw-named-ACL>}
no match access-group
{<hw-IP-ACL>|<hw-MAC-ACL>|<hw-named-ACL>}
Mode Class Map or VLAN Access-Map
Usage notes First create an access-list that applies the appropriate action to matching packets.
Then use the match access-group command to apply this access-list as desired.
Note that this command will apply the access-list matching only to incoming data
packets.
Examples To configure a class-map named “cmap1”, which matches traffic against access-list
3001, which allows IP traffic from any source to any destination, use the
commands:
awplus# configure terminal
awplus(config)# access-list 3001 permit ip any any
awplus(config)# class-map cmap1
awplus(config-cmap)# match access-group 3001
To configure a class-map named “cmap2”, which matches traffic against access-list
4001, which allows MAC traffic from any source to any destination, use the
commands:
awplus# configure terminal
awplus(config)# access-list 4001 permit any any
awplus(config)# class-map cmap2
awplus(config-cmap)# match access-group 4001
Parameter Description
<hw-IP-ACL> Specify a hardware IP ACL number in the range <3000-3699>.
<hw-MAC-ACL> Specify a hardware MAC ACL number in the range <4000-4699>.
<hw-named-ACL> Specify a hardware named ACL (IP, IPv6 or MAC address entries).