D-Link DGS-1510 Series - Page 47

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
44
If an IP access group is already configured on the interface, the command applied later will overwrite
the previous setting. Only one access list of the same type can be applied to the same interface; but
access-lists of different types can be applied to the same interface.
The association of an access group with an interface will consume the filtering entry resource in the
switch controller. If the resources are insufficient to commit the command, then an error message will
be displayed. There is a limitation on the number of port operator resources. If applying the command
exhausts the available port selectors, then an error message will be displayed.
Example
This example shows how to specify the IP access list “Strict-Control” as an IP access group for an
Ethernet port 6/0/2.
Switch# configure terminal
Switch(config)# interface eth6/0/2
Switch(config-if)#ip access-group Strict-Control
The remaining applicable IP related access entries are 526
Switch(config-if)#
4-8 ip access-list
This command is used to create or modify an IP access list. This command will enter into the IP
access list configuration mode. Use the no form of this command to remove an IP access list.
ip access-list [extended] NAME [NUMBER]
no ip access-list [extended] {NAME | NUMBER}
Parameters
extended
(Optional) Specifies that without this option the IP access list is a
standard IP access list. When using the extended option, more
fields can be chosen for the filter.
NAME
Specifies the name of the IP access list to be configured. The
maximum length is 32 characters. The first character must be a
letter.
NUMBER
Specifies the ID number of the IP access list. For standard IP
access lists, this value is from 1 to 1999. For extended IP access
lists, this value is from 2000 to 3999.
Default
None.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
The name must be unique among all access lists. The characters used in the name are case sensitive.
If the access list number is not specified, the biggest unused number in the range of IP access list
numbers will be assigned automatically.
Example
This example shows how to configure an extended IP access list, named “Strict-Control” and an IP
access-list, named “pim-srcfilter”.